How to configure TLS client certificate authentication only for specific paths?

@marq wrote:

The following blog post describes how to configure TLS client certificate authentication with HA Proxy: https://loadbalancer.org/blog/client-certificate-authentication-with-haproxy/

This question describes how to enable it based on domain name: How to set ssl verify client for specific domain name

However, I would like to enable it based on url path.
Example:
Required for:
https://my-domain.com/path1
But disabled for:
https://my-domain.com/path2

Note: I am terminating the TLS connection at HA Proxy. So the information should be accessible to HA Proxy.
Before I started using HA Proxy I could do this easily in Apache, by putting the SSLVerifyClient inside a Location block.

Is this possible with HA Proxy? If so, how can it be done?

Posts: 2

Participants: 2

Read full topic