[LRUG] SSL client certificates

[Andrew Stewart]

> But I think I've managed to distract everyone by talking about chains... Andrew was originally talking about clients using certs (signed by the self-signed CA) as a browser-authentication mechanism.

That's right, this is about authenticating the certificate presented by a browser to Nginx, not Nginx presenting a certificate for the domain to the browser.

I'll try to set up a staging server with my own self-signed CA and see if I can reproduce the problem.  Thanks for the idea!