When setting up nginx with client-certificate config, ssl_verify_client should be set to on or optional. If we want to bypass verification for local users (like 192.168.0.0/24), we can use optional value. But this way, nginx still requests a certificate from browser and browser will show a prompt to user (if a signed certificate installed on browser).

Client-Certificate browser prompt

How we can eliminate this popup for local IPs? (even using lua module?). Can we set the value of ssl_verify_client based on IP (e.g. with a map)? (Can be a ssl_verify_client_by_lua or not?)

Your Answer

 

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Browse other questions tagged or ask your own question.