ssl_require_route_cert_only
This parameter overrides the
ssl_require_client_cert parameter.
ssl_require_route_cert_only = enable | disable
If
ssl_require_route_cert_only is set to
enable, the server requires a digital certificate only for TLS connections coming from routes,
regardless of the value of
ssl_require_client_cert. In this case, the server does not require a digital certificate for TLS connections coming from clients and from its fault-tolerant peer.
If
ssl_require_route_cert_only is set to
disable, whether the server requires a digital certificate for TLS connections coming from all sources (routes, clients, and fault-tolerant peer) still depends on the value of
ssl_require_client_cert.
The default value is
disable.