Whitelisting IPs from Certificate Based Authentication

Zeal Vora zeal at freecharge.com
Tue Aug 16 09:10:21 UTC 2016


We have a Certificate Based Authentication for one of our websites.

We want that if users visit from Office IP's then they should not have to
go via Certificate Based Authentication. Rest for all, Authentication is

What would be the ideal way of doing this ?

I believe $remote_addr can play role in this.

*My current sample Nginx config :*-

    listen          80;

    ssl_client_certificate /backup/ca.crt;
    ssl_verify_client   on;

    location /
     root /var/www/html;
     index index.html;
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nginx.org/pipermail/nginx/attachments/20160816/dc9b096a/attachment.html>

More information about the nginx mailing list