When setting up nginx with client-certificate config, ssl_verify_client should be set to on or optional. If we want to bypass verification for local users (like, we can use optional value. But this way, nginx still requests a certificate from browser and browser will show a prompt to user (if a signed certificate installed on browser).

Client-Certificate browser prompt

How we can eliminate this popup for local IPs? (even using lua module?). Can we set the value of ssl_verify_client based on IP (e.g. with a map)? (Can be a ssl_verify_client_by_lua or not?)

Your Answer

By clicking "Post Your Answer", you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.