kayx23 commented on issue #10647:
URL: https://github.com/apache/apisix/issues/10647#issuecomment-1855105047

   It's probably a no, the reasons being that:
   
   * X.509 certs are valid for domains or sub-domains and have no business to 
do with paths.
   * APISIX doesn't offer extra mechanisms (AFAIK?) to to help you implement 
this by path.
   
   We have some 
[docs](https://docs.api7.ai/apisix/how-to-guide/traffic-management/tls-and-mtls/configure-https-between-client-and-apisix)
 around the topic where you'll see the (m)TLS is independent of the specific 
path.
   
   The only thing about mTLS by path/route is 
https://github.com/apache/apisix/pull/9322 
([docs](https://apisix.apache.org/docs/apisix/3.4/tutorials/client-to-apisix-mtls/#mtls-bypass-based-on-regular-expression-matching-against-uri)),
 where you can whitelist a path to BYPASS mTLS. But this is not what you want.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to