# Verify Peer of SSL request in Proxy Module

**URL:** <https://www.ruby-forum.com/t/verify-peer-of-ssl-request-in-proxy-module/211747>\
**Category:** NGINX\
**Created:** [September 13, 2011, 1:58am UTC](https://www.ruby-forum.com/t/verify-peer-of-ssl-request-in-proxy-module/211747 "2011-09-13T01:58:55Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![luislavena](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/l/0ea827/32.png) [@luislavena](https://www.ruby-forum.com/u/luislavena)\
**Post date:** [September 13, 2011, 1:58am UTC](https://www.ruby-forum.com/t/verify-peer-of-ssl-request-in-proxy-module/211747/1 "2011-09-13T01:58:55Z")

</div>

When reverse proxying over SSL, I would like to be able to set the  
context to VERIFY\_PEER and to provide my own CA file. Right now nginx  
uses the OpenSSL default of VERIFY\_NONE.

There appears to be some code around this in  
ngx\_ssl\_client\_certificate in ngx\_event\_openssl.c, but this is for  
validating client certificates, not nginx acting as a client.

I am working on a patch, but if Igor or someone more experienced  
already has this working, I would prefer to use that.