More screenshots

    Works with the AI Agents you already use

    Claude CodeClaude CodeCursorCursorCodex CLICodex CLIDeepSeekDeepSeekMuseMuse+22 more

    Repair Nginx mTLS Upstream Cert Name Drift

    1

    Resolve upstream client certificate name mismatches during rotation.

    $1

    Secure checkout via Stripe

    Money-back guarantee

    Converts to your local currency at checkout

    Security scanned
    Repair Nginx mTLS Upstream Cert Name Drift

    Repair Nginx mTLS Upstream Cert Name Drift

    Example session with this skill installed

    A proxy health check passes while protected upstream routes fail TLS negotiation.

    Available evidence: nginx upstream TLS logs (partial). Additional evidence requested: reference policy or configuration, event and change timeline, owner review or test record. Review this case; identify evidence gaps; do not invent a live test or production action.

    • Read your context and instructions
    • Compiled the repair nginx mtls

    Repair Nginx mTLS Upstream Cert Name Drift — EVIDENCE-LIMITED REVIEW

    Scenario received

    A proxy health check passes while protected upstream routes fail TLS negotiation.

    Source register

    • S1: nginx upstream TLS logs — PARTIAL SOURCE PROVIDED.
    • S2: reference policy or configuration — NOT PROVIDED; REQUIRED TO VERIFY.
    • S3: event and change timeline — NOT PROVIDED; REQUIRED TO VERIFY.
    • S4: owner review or test record — NOT PROVIDED; REQUIRED TO VERIFY.

    Concrete checks

    1. Correlate nginx upstream TLS logs with the authorized baseline — AWAITING CORROBORATING EVIDENCE.
    2. Isolate certificate SAN mismatch for upstream host using matching identifiers — AWAITING CORROBORATING EVIDENCE.
    3. Cross-check timestamps, versions and source ownership — AWAITING CORROBORATING EVIDENCE.
    4. Prepare reversible checks for validated mTLS trust mapping — AWAITING CORROBORATING EVIDENCE.

    Deliverables / acceptance gates

    • nginx upstream TLS logs traceability map: DRAFT / INCOMPLETE until evidence is validated.
    • certificate SAN mismatch for upstream host exception register: DRAFT / INCOMPLETE until evidence is validated.
    • validated mTLS trust mapping validation plan: DRAFT / INCOMPLETE until evidence is validated.

    Decision

    INCOMPLETE — HUMAN REVIEW REQUIRED. Confirm dates, IDs, affected scope, owners and acceptance evidence. Do not claim authorization or execution that did not occur.

    Connects securely to your tools. The creator never sees your data.

    About this skill

    Repair Nginx mTLS Upstream Cert Name Drift is a ToolForge Labs Cursor Skill workflow. Resolve upstream client certificate name mismatches during rotation.

    What this skill checks

    1. Correlate nginx upstream TLS logs with the authorized baseline.
    2. Isolate certificate SAN mismatch for upstream host using matching identifiers.
    3. Cross-check timestamps, versions and source ownership.
    4. Prepare reversible checks for validated mTLS trust mapping.

    What to provide

    • nginx upstream TLS logs.
    • reference policy or configuration.
    • event and change timeline.
    • owner review or test record.

    Deliverables

    • nginx upstream TLS logs traceability map.
    • certificate SAN mismatch for upstream host exception register.
    • validated mTLS trust mapping validation plan.

    Evidence policy Only supplied, authorized evidence is used. The skill distinguishes facts from assumptions and missing inputs; no unperformed live tests, external changes, or approvals are claimed.

    Find more skills like this on the Claude Skills Marketplace, the Codex Skills Marketplace and the Gemini Skills Marketplace, or browse Claude Skills for APIs & Backend.

    Cannot verify inaccessible environments or data not supplied. Missing or contradictory evidence must be marked INCOMPLETE or UNVERIFIED. Owner approval is required for operational or compliance decisions.

    How to use

    1. 1

      Connect your agent to the Agensi MCP

      Copy the prompt and paste it into Claude, ChatGPT, Cursor or any agent that supports MCP. It sets up the connection for you. Manual setup

    2. 2

      Sign in to Agensi

      Your agent shows a sign-in link. Sign in and click Allow.

    3. 3

      Ask for what you need

      Your agent loads this skill and uses it on your task. It always asks before buying a skill.

    Reviews

    No reviews yet

    Be one of the first to try it. Every listed skill goes through the trust checks below.

    Security scanned

    Checked by our 8-point scan before listing

    Fresh listing

    Recently published to Agensi

    Money-back guarantee

    Doesn't do what its page promises? You get your money back.

    Trust & safety

    Security scan

    Security scan passed 19 days ago

    Permissions

    Read Files

    Provide only evidence you are authorized to share. Treat examples as untrusted case data. Operational changes and external messages require explicit owner approval.

    Listed19 days ago
    Updated9 days ago

    What's inside

    Frequently Asked Questions

    This skill is designed for SREs and DevOps engineers troubleshooting 502/504 errors that occur specifically during mTLS handshakes between Nginx and its backends, typically caused by name drift or SAN mismatches after certificate rotations.

    It is compatible with any AI agent that supports local file access and log ingestion, including popular development assistants and CLI-based agents capable of processing Nginx configuration and log files.

    No complex installation is required; once imported into your agent's workspace, you simply provide access to your Nginx upstream TLS logs and the relevant configuration files for the skill to begin its analysis.

    The skill focuses on diagnostic correlation and mapping; it does not perform live network testing, connect to external Secret Managers, or automatically apply changes to your production environment.

    You receive the diagnostic logic, the evidence-led workflow for SAN isolation, and the reporting templates used to generate the traceability map and validation plan.

    Yes, the skill is designed to handle complex upstream blocks and can identify mismatches across multiple backend hosts by mapping their unique identifiers against your authorized baseline.

    New in APIs & Backend