Intro to Mutual TLS

Increase security to your APIs using mutual TLS. Understand how mutual TLS (mTLS) works and how to use nginx to secure your APIs with it.

00:00 Intro
00:10 Understand mutual TLS
00:58 Secure your APIs with nginx and mutual TLS
02:56 Check everything works
03:18 Overcome certificate specification error
03:52 Certificate fingerprints

-----------
-----------
Follow us

I would like to see how the browser picks its certificate. I've seen many tutorials using curl, but never a browser like Chrome or Firefox.

[sanatanShishya]

Nice video, but it need to more proper explanation to writing those conf file and details for different ports.
then is will be more good to understand and implement on same.

[paulm]

Implemented a hyperv machine using ubuntu ISO, installed nginx and made all this work in 3 hours thanks to this video. End to end. Really cool Thank you.

[sandeepnagaraj]

Great demo. Any idea how to pass the client certificate when using the browser/mobile app browser, please do let me know

[jamesnos]

Great video! Wondering if you have any idea how to get a browser like chrome to send the client certificate with the request. Current nginx will through an error like this "No required SSL certificate was sent"

[youtubegarbageu]

the -k already ignores tls handshake, so this example is not a true test of this...passing cert and key is useless with -k flag in curl command

[MackSolomon]

Great simple explanation, thank you...

[playaspec]

Having to cat all the client certificates you want to allow is a bit ugly and difficult to manage at scale. Is there any kind of lookup mechanism or module that makes granting or denying users more granular? Excellent video BTW! Thanks!