Re:Do you check HTTPS certificates in your API clients?
by jokull on Sunday July 29, 2012 @06:20PM
(#4309953)
NGiNX reverse proxy can take care of this and does so securely, am I right?
[ Parent
| on HN ]
Re:Do you check HTTPS certificates in your API clients?
by moonboots on Sunday July 29, 2012 @08:24PM
(#4310315)
Nginx ssl reverse proxy does not verify certificates. I tested by reverse proxying to an ssl server with a self signed certificate. Nginx did not log any warnings or complain.
Re:Do you check HTTPS certificates in your API clients?
by rfugger on Sunday July 29, 2012 @06:52PM
(#4310047)
No, nginx is on the server side. The article is about client-side.
Re:Do you check HTTPS certificates in your API clients?
by va1en0k on Sunday July 29, 2012 @06:56PM
(#4310060)
You can use nginx as a proxy on your side for any APIs. Just proxy_pass it to the API, and listen only on the local side. It can provide caching and other stuff that way.
Re:Do you check HTTPS certificates in your API clients?
by obtu on Monday July 30, 2012 @06:04AM
(#4311625)
Yeah, but that's proxy, not reverse proxy. It's possible to do something fiddler-like using apache or nginx to mitm oneself and dump everything that goes through.
Re:Do you check HTTPS certificates in your API clients?
by va1en0k on Sunday July 29, 2012 @06:23PM
(#4309960)
Probably they can.
However, I don't know anything about using nginx that way. If you give me a link or something like that, I'll happily add it to my article. Or I'll just investigate later.
Re:Do you check HTTPS certificates in your API clients?
by jokull on Sunday July 29, 2012 @08:20PM
(#4310302)
Yeah my bad I read your article assuming you were an API provider not a consumer. In the case of consuming API’s I suggest python-requests, an excellent library that is extremely well maintained.