Merge pull request #1572 from estaleiro/cacertificate-secfix

Certificate Auth Bugfix
kubernetes · Oct 24, 2017 · d965ee8 · d965ee8
2 parents 0dab51d + c9fbfa3
commit d965ee8
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/rootfs/etc/nginx/template/nginx.tmpl b/rootfs/etc/nginx/template/nginx.tmpl
@@ -720,8 +720,11 @@ stream {
 
             # Pass the extracted client certificate to the backend
             {{ if not (empty $server.CertificateAuth.CAFileName) }}
-            proxy_set_header ssl-client-cert        $ssl_client_escaped_cert;
+            proxy_set_header ssl-client-cert        $ssl_client_raw_cert;
             proxy_set_header ssl-client-verify      $ssl_client_verify;
+            {{ else }}
+            proxy_set_header ssl-client-cert        "";
+            proxy_set_header ssl-client-verify      "";
             {{ end }}
 
             # Allow websocket connections