[TKT] mTLS

Website, Application, Performance Security
1

What is the name of the domain?

What is the issue you’re encountering

mTLS on backend servers

What steps have you taken to resolve the issue?

We are trying to set mTLS on a nginx server behind Cloudflare, it works on local networks but not if the request goes through Cloudflare, it’s like if client certificates don’t reach nginx (maybe beause of tls termination?)…

Is this scenario possible? did a few tests with managed transform and custom rules to set client certificates header on response to origin but no luck…

Was the site working with SSL prior to adding it to Cloudflare?

Yes

What is the current SSL/TLS setting?

Full (strict)

2

Correct, if proxied, Cloudflare is terminating the TLS connection at the edge, so your clients are trying to use the certificate there. A separate connection is made from Cloudflare to your origin.

If you have an Enterprise plan…

Otherwise you will need to use Cloudflare certificates…

1 Like
3

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.