通过证书dn名映射应用其他的登录名

    location / {
        root   /usr/share/nginx/html;
        index  index.html index.htm;

        default_type 'text/plain';

        echo $ssl_client_s_dn;
        set_by_lua_file $res2 /usr/local/openresty/nginx/conf/conf.d/sub.lua  $ssl_client_s_dn;
        echo  $res2;

        set_by_lua $req ' return ngx.req.get_headers()["Authorization"]  '  ;
        echo $req;

      if ($req) {
        exit 401

        }
        set_by_lua $base64 'return  string.sub(ngx.arg[1], 7 )'  $req  ;
        #echo $base64;

        set_decode_base64  $base64   ;   #  $base6 ;    #'emR4emR4OnpkeHo=';
        echo $base64;


        set_by_lua $res3 "return string.sub(ngx.arg[1], string.find(ngx.arg[1], ':' ) , 25  ) "   $base64    ;
        #set_by_lua_file $res3 /usr/local/openresty/nginx/conf/conf.d/rep.lua $ssl_client_s_dn  $base64  ;
        echo  $res3;

        set $new  "$res2$res3" ;
        echo $new;
        set_encode_base64 $new1 $new;
        echo $new1 ;

        proxy_set_header "Authorization" "Basic $new1" ;

评论

1 楼 zdx3578 2014-05-09  

http://www.linuxyw.com/a/WEBfuwu/20130530/516.html  nginx ssl 双向配置及ca 证书命令