Hello,

I want to enable client side ssl for a specific URL only. My web app admin lives at https://example.org/admin and I want only the /admin part require a client certificate. In Apache I would do it with a <Location /admin> block. In haproxy I am able to require a certificate for the entire frontend, but not for part of the frontend. (For example, |acl req_cert path_beg /admin|- and maybe something like client-cert if req_cert).

On IRC I was told this is not possible currently: "[16:30:12] meineerde: Raymii: this isn't possible right now as the ssl handling is fully done before any higher-layer stuff (i.e. http) is handled".

If it's possible, I'd like to do a feature request?

Sincerely,
Remy van Elst
https://raymii.org


Attachment: smime.p7s
Description: S/MIME-cryptografische ondertekening

Reply via email to