I have a question dealing with Nginx, Safari, web sockets and ssl_verify_client. I am creating a secure site with javascript web sockets on the front end to a python tornado backend. This site uses web sockets to communicate back and forth. One of the requirements is to have all connections authenticate with client side certificates. It seems that my setup is working well except when it comes to safari. It seems that safari cannot validate the client certificate during the web socket negation. With firefox and chrome, I do not get any errors and/or warnings. Safari fails at the web socket part of my application I get the error information "WebSocket connection to 'was://devtest.xxxx.com' failed: Unexpected response code:400. (FYI, for security reasons I have altered the domain/ip information, I hope you will understand). Here is a screenshot of the safari error. Picture of error code.
Does anyone know if Safari can use client certificate validation with javascript web sockets?
Thank you,
stabiuti