ssl_require_route_cert_only

This parameter overrides the ssl_require_client_cert parameter.

ssl_require_route_cert_only = enable | disable

If ssl_require_route_cert_only is set to enable, the server requires a digital certificate only for TLS connections coming from routes, regardless of the value of ssl_require_client_cert. In this case, the server does not require a digital certificate for TLS connections coming from clients and from its fault-tolerant peer.

If ssl_require_route_cert_only is set to disable, whether the server requires a digital certificate for TLS connections coming from all sources (routes, clients, and fault-tolerant peer) still depends on the value of ssl_require_client_cert.

The default value is disable.