Support obtaining client certificate for mTLS from HTTP header

[gerritlansing]

Describe the feature you'd like to add to nginx

Enable nginx to obtain the client certificate used for mTLS (ssl_verify_client) from a configurable HTTP header, where the client certificate chain is represented by a URL encoded PEM format.

Describe the problem this feature solves

Our application utilizes client certificate authentication, presently performed by nginx. We need to utilize an external Web Application Firewall, which is capable of providing a client certificate it receives as an HTTP header without verifying it.

Additional context

See: AWS ALB Documentation