Whitelisting IPs from Certificate Based Authentication

[Zeal Vora]

Hi

We have a Certificate Based Authentication for one of our websites.

We want that if users visit from Office IP's then they should not have to
go via Certificate Based Authentication. Rest for all, Authentication is
necessary.

What would be the ideal way of doing this ?

I believe $remote_addr can play role in this.


*My current sample Nginx config :*-

server
{
    listen          80;

    ssl_client_certificate /backup/ca.crt;
    ssl_verify_client   on;

    location /
    {
     root /var/www/html;
     index index.html;
 }
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nginx.org/pipermail/nginx/attachments/20160816/dc9b096a/attachment.html>