NGINX Ingress Controller forwarded Certificate to Apache2 Extraction

pToker

2/4/23, 7:41 PM

On our k8s cluster we use NGINX Ingress Controller to request the clients (web-browsers) to provide a client certificate. If the certificate is valid, the request ist proxied to a full-blown Apache Server inside the private network.

The nginx <> Apache communication is not TLS encrypted. Using the Option 'nginx.ingress.kubernetes.io/auth-tls-pass-certificate-to-upstream: "true"' on the ngnix, the Apache Server receives a header named X-Client-Certificate containing the full client certificate in PEM format.

At this point I am lost. How do I utilize this certificate just like I would, when sending it from the client directly to the Apache HTTP server (not via proxy)? I intend to use the DN of the certificates information as REMOTE_USER in order to perform an ldap authorization (using mod_authnz_ldap) but am not able to do so (REMOTE_USER contains '500'). Not having a proxy in between, I would use this command and have the username in the REMOTE_USER Environment variable of Apache - having it accessible as username to authorize in LDAP: SSLUserName SSL_CLIENT_S_DN_CN

Anyone experienced with this kind of setup and could give me a hint? I have exhausted all known to me and found options.

Thanks in advance.

0 + 0

http-headers

apache-2.4

client-certificate

nginx-ingress

Elon Musk

I sit in a Tesla and translated this thread with Ai:

EN: NGINX Ingress Controller forwarded Certificate to Apache2 Extraction

TH: NGINX Ingress Controller ส่งต่อใบรับรองไปยัง Apache2 Extraction

RO: NGINX Ingress Controller a transmis certificatul către Apache2 Extraction

RU: NGINX Ingress Controller перенаправил сертификат в Apache2 Extraction

VI: NGINX Ingress Controller đã chuyển tiếp Chứng chỉ tới Apache2 Extraction

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.