Topic: How to bypass SSLVerifyClient for specific IP Address

[matthewcm]

Hello all,

I'm fairly new to HTTPD so I need some insight from the pro's.

The previous admins set up HTTPD on a Linux box. It is configured to read Certs by the user accessing a specific DNS (ex: https://cxg-now-test.abc). A reverse proxy is then used to send the user to a the app server ,if their cert is valid, which resides on the same box. This works great.

In my HTTPD config, I have a section like this:

[James Blond]

I found this https://serverfault.com/questions/411858/allowing-users-in-from-an-ip-address-without-certificate-client-authentication

Maybe that works for you, too.

[matthewcm]

So we did some asking around other teams have just changed their SSLVerifyClient to 'optional'

So we're going to do the same. We made the change in DEV and TEST and so far all is good