diff options
| author | John Estabrook <jestabro@vyos.io> | 2026-09-11 19:14:25 -0500 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2026-09-11 19:14:25 -0500 |
| commit | c93510a0d6706ad42bb7de102ae4665768b78020 (patch) | |
| tree | c855363bd02f43d899e660ed3168f9657d9bd710 /data/templates/https | |
| parent | f226af1e4ad74902705cf0f6e810efb2045a536d (diff) | |
| parent | fa46c294c8239534472a140293125864c0ea857d (diff) | |
| download | vyos-1x-c93510a0d6706ad42bb7de102ae4665768b78020.tar.gz vyos-1x-c93510a0d6706ad42bb7de102ae4665768b78020.zip | |
Merge pull request #5464 from omnom62/T8989-hotfix-x-client-verify-bypass
http-api: T8989: fix X-Client-Verify header passthrough auth bypass
Diffstat (limited to 'data/templates/https')
| -rw-r--r-- | data/templates/https/nginx.default.j2 | 2 |
1 files changed, 0 insertions, 2 deletions
diff --git a/data/templates/https/nginx.default.j2 b/data/templates/https/nginx.default.j2 index 0f1a79ad7..49134d5ab 100644 --- a/data/templates/https/nginx.default.j2 +++ b/data/templates/https/nginx.default.j2 @@ -62,10 +62,8 @@ server { proxy_set_header X-Forwarded-Proto $scheme; proxy_read_timeout 600; proxy_buffering off; -{% if certificates.mtls_ca_path is vyos_defined %} proxy_set_header X-Client-Verify $ssl_client_verify; proxy_set_header X-Client-DN $ssl_client_s_dn; -{% endif %} {% else %} return 503; {% endif %} |