When I set the ssl_verify client to optional the cloudlfare proxy works awesome and https is established. However, I can still access the website without going through cloudlfare by directly typing in the ip address and port. It connects with HTTPS but insecurely ie the cert not valid like its self authenticated. like when you go to a sketchy website and google asks if you want to continue. When I set the verify client to on it returns and "nginx 400 400 Bad Request No required SSL certificate was sent". I am so confused as to what I am doing wrong. Could anyone help? Am I not able to treat a tunnel like an origin server? If so then why do the origin CA certs work? Also to note when I turn off No TLS Verify it gives me the same 400 error when I do optional.
In this tutorial, you will secure a website served by Nginx with an Origin CA certificate from Cloudflare and configure Nginx to use authenticated pull requeβ¦