ssl_verify_client      optional;
ssl_client_certificate /etc/nginx/conf.d/client_cas.crt;