GitHunt
SO

sonnyyu/mtls-nginx

The Client Certificate Authentication/mTLS Architecture in NGINX

client-cert-authenticationclient-certificate-authenticationdockerdocker-composemtlsmtls-authenticationmutual-authenticationnginxtls

Use mtls-cert-manage generate server/client/ca certificate

https://github.com/sonnyyu/mtls-cert-manage

Copy Certificate from mtls-cert-manage

cd ~/mtls-cert-manage/pki
./server.sh
./client.sh

Copy Certificate from mtls-cert-manage

cd ~/mtls-cert-manage/pki/servercerts 
cp * ~/mtls-nginx/certs
cd ~/mtls-cert-manage/pki/clientcerts
cp * ~/mtls-nginx/certs
cd ~/mtls-nginx/certs
cp 192.168.1.204.crt 192.168.1.204.key ca.crt ~/mtls-nginx/nginx/certs

Getting started nginx with certificate

cd ~/mtls-nginx
docker-compose up -d --build

Quit

~/mtls-nginx
docker-compose down

Quit and remove Volume

~/mtls-nginx
docker-compose down -v

Test mTlS

cd ~/mtls-nginx/certs
curl --cert client1.crt --key client1.key --cacert ca.crt https://192.168.1.204
curl --cert-type P12 --cert client1.p12:p12pass --cacert ca.crt https://192.168.1.204

Install certificate at PC

Install certificate

Open Browser

https://192.168.1.204

Languages

HTML67.1%Dockerfile32.9%

Contributors

SO
Apache License 2.0
Created March 8, 2022
Updated July 7, 2025
sonnyyu/mtls-nginx | GitHunt