JadKHaddad / Nginx-mTLS

Get yourself a root CA certificate.

step ca root certs/root.crt --ca-url <ca-url> --fingerprint <fingerprint>

Create the server certificate. server-reverse-proxy is the hostname of the server and will be used in client-nginx.conf to verify the server certificate.

step ca certificate "server-reverse-proxy" certs/server.crt certs/server.key --ca-url <ca-url> --root certs/root.crt   

Create the client certificate.

step ca certificate "client" certs/client.pem certs/client.key --ca-url <ca-url> --root certs/root.crt

docker network create somenetwork

docker build -t server -f Dockerfile.server .

docker run -it --rm --name server --network somenetwork server

docker build -t server-nginx -f Dockerfile.server-nginx .

docker run -it --rm --name server-nginx --network somenetwork server-nginx

docker build -t client-nginx -f Dockerfile.client-nginx .

docker run -it --rm --name client-nginx --network somenetwork client-nginx

docker build -t client -f Dockerfile.client .

docker run -it --rm --name client --network somenetwork client

curl http://client-nginx