{"action":"created","issue":{"url":"https://api.github.com/repos/cuber/ngx_http_google_filter_module/issues/32","labels_url":"https://api.github.com/repos/cuber/ngx_http_google_filter_module/issues/32/labels{/name}","comments_url":"https://api.github.com/repos/cuber/ngx_http_google_filter_module/issues/32/comments","events_url":"https://api.github.com/repos/cuber/ngx_http_google_filter_module/issues/32/events","html_url":"https://github.com/cuber/ngx_http_google_filter_module/issues/32","id":74721535,"number":32,"title":"Question: Does it verify upstream SSL certificates?","user":{"login":"biergaizi","id":1310693,"avatar_url":"https://avatars.githubusercontent.com/u/1310693?v=3","gravatar_id":"","url":"https://api.github.com/users/biergaizi","html_url":"https://github.com/biergaizi","followers_url":"https://api.github.com/users/biergaizi/followers","following_url":"https://api.github.com/users/biergaizi/following{/other_user}","gists_url":"https://api.github.com/users/biergaizi/gists{/gist_id}","starred_url":"https://api.github.com/users/biergaizi/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/biergaizi/subscriptions","organizations_url":"https://api.github.com/users/biergaizi/orgs","repos_url":"https://api.github.com/users/biergaizi/repos","events_url":"https://api.github.com/users/biergaizi/events{/privacy}","received_events_url":"https://api.github.com/users/biergaizi/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-05-09T17:39:23Z","updated_at":"2015-05-11T03:15:08Z","closed_at":null,"body":"Does the module verify the upstream connection to Google servers, provides protection from MITM attacks?"},"comment":{"url":"https://api.github.com/repos/cuber/ngx_http_google_filter_module/issues/comments/100752684","html_url":"https://github.com/cuber/ngx_http_google_filter_module/issues/32#issuecomment-100752684","issue_url":"https://api.github.com/repos/cuber/ngx_http_google_filter_module/issues/32","id":100752684,"user":{"login":"cuber","id":1525381,"avatar_url":"https://avatars.githubusercontent.com/u/1525381?v=3","gravatar_id":"","url":"https://api.github.com/users/cuber","html_url":"https://github.com/cuber","followers_url":"https://api.github.com/users/cuber/followers","following_url":"https://api.github.com/users/cuber/following{/other_user}","gists_url":"https://api.github.com/users/cuber/gists{/gist_id}","starred_url":"https://api.github.com/users/cuber/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cuber/subscriptions","organizations_url":"https://api.github.com/users/cuber/orgs","repos_url":"https://api.github.com/users/cuber/repos","events_url":"https://api.github.com/users/cuber/events{/privacy}","received_events_url":"https://api.github.com/users/cuber/received_events","type":"User","site_admin":false},"created_at":"2015-05-11T03:15:08Z","updated_at":"2015-05-11T03:15:08Z","body":"This module is using the native nginx `ngx_http_proxy_module` to make proxy requests, so the behavior of ssl verification depend on nginx itself.\r\nThere is an option `proxy_ssl_verify ` with nginx version >= 1.7.0, you can do some test on it and i will be happy to know the results.\r\nMaybe this link http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_ssl_verify can help"}}