Configuring two-way SSL using Estonian EID smartcards [pdf]

Turns out it is surprisingly easy to require Estonian ID-Card login on a web side. Just add those 3 lines to your nginx server block and you are done.

  ssl_client_certificate /etc/ssl/certs/EID_Bundle.pem;
  ssl_verify_client on;
  ssl_verify_depth 2