News for hackers. Stuff that matters.
Re:Do you check HTTPS certificates in your API clients? by jokull on Sunday July 29, 2012 @06:20PM (#4309953)
NGiNX reverse proxy can take care of this and does so securely, am I right?
Re:Do you check HTTPS certificates in your API clients? by moonboots on Sunday July 29, 2012 @08:24PM (#4310315)
Nginx ssl reverse proxy does not verify certificates. I tested by reverse proxying to an ssl server with a self signed certificate. Nginx did not log any warnings or complain.
Re:Do you check HTTPS certificates in your API clients? by rfugger on Sunday July 29, 2012 @06:52PM (#4310047)
No, nginx is on the server side. The article is about client-side.
Re:Do you check HTTPS certificates in your API clients? by va1en0k on Sunday July 29, 2012 @06:56PM (#4310060)
You can use nginx as a proxy on your side for any APIs. Just proxy_pass it to the API, and listen only on the local side. It can provide caching and other stuff that way.
Re:Do you check HTTPS certificates in your API clients? by obtu on Monday July 30, 2012 @06:04AM (#4311625)
Yeah, but that's proxy, not reverse proxy. It's possible to do something fiddler-like using apache or nginx to mitm oneself and dump everything that goes through.
Re:Do you check HTTPS certificates in your API clients? by va1en0k on Sunday July 29, 2012 @06:23PM (#4309960)
Probably they can.

However, I don't know anything about using nginx that way. If you give me a link or something like that, I'll happily add it to my article. Or I'll just investigate later.

Re:Do you check HTTPS certificates in your API clients? by jokull on Sunday July 29, 2012 @08:20PM (#4310302)
Yeah my bad I read your article assuming you were an API provider not a consumer. In the case of consuming API’s I suggest python-requests, an excellent library that is extremely well maintained.