From 788eb58bfe2b013ef99fda3ba9855966b0d8fe90 Mon Sep 17 00:00:00 2001
From: Arno Uhlig <arno.uhlig@sap.com>
Date: Mon, 9 Oct 2017 13:13:50 +0200
Subject: [PATCH] ssl_client_cert is deprecated. use ssl_client_escaped_cert.
 add ssl_client_verify to enable client certificate verification.

---
 rootfs/etc/nginx/template/nginx.tmpl | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/rootfs/etc/nginx/template/nginx.tmpl b/rootfs/etc/nginx/template/nginx.tmpl
index 00aa4e42ae..b5caf99fe1 100644
--- a/rootfs/etc/nginx/template/nginx.tmpl
+++ b/rootfs/etc/nginx/template/nginx.tmpl
@@ -741,7 +741,8 @@ stream {
 
             # Pass the extracted client certificate to the backend
             {{ if not (empty $server.CertificateAuth.CAFileName) }}
-            proxy_set_header ssl-client-cert        $ssl_client_cert;
+            proxy_set_header ssl-client-cert        $ssl_client_escaped_cert;
+            proxy_set_header ssl-client-verify      $ssl_client_verify;
             {{ end }}
 
             # Allow websocket connections