# How to prohibit a client certificate

**URL:** <https://www.ruby-forum.com/t/how-to-prohibit-a-client-certificate/223125>\
**Category:** NGINX\
**Created:** [September 22, 2012, 7:06pm UTC](https://www.ruby-forum.com/t/how-to-prohibit-a-client-certificate/223125 "2012-09-22T19:06:03Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![aris](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/a/258eb7/32.png) [@aris](https://www.ruby-forum.com/u/aris)\
**Post date:** [September 22, 2012, 7:06pm UTC](https://www.ruby-forum.com/t/how-to-prohibit-a-client-certificate/223125/1 "2012-09-22T19:06:03Z")

</div>

Hi,  
I have a normal running nginx https server with mutual  
authentication, if i want to prohibit access a client certificate, how  
should I do?

```
In addition, how to set up the mutual authentication of client

```

access different pages?

Regards

–  
Leon  
+86.13168330000

> **[KingDest.com is for sale | HugeDomains](https://www.hugedomains.com/domain_profile.cfm?d=kingdest.com)**
>
> Great domain names provide SEO, branding, and a memorable experience for your users. Get a premium domain today.

---

<div class="post-metadata">

**Author:** ![leon](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/l/dc4da7/32.png) [@leon](https://www.ruby-forum.com/u/leon)\
**Post date:** [September 24, 2012, 11:14am UTC](https://www.ruby-forum.com/t/how-to-prohibit-a-client-certificate/223125/2 "2012-09-24T11:14:32Z")

</div>

On 22 Sep2012, at 21:05 , leon [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid) wrote:

> Hi,  
> I have a normal running nginx https server with mutual  
> authentication, if i want to prohibit access a client certificate, how  
> should I do?

> **[Module ngx\_http\_oidc\_module](http://nginx.org/en/docs/http/ngx_http_oidc_module.html#ssl_crl)**
>
> The ngx\_http\_oidc\_module module (1.27.4) implements authentication as a Relying Party in OpenID Connect using the Authorization Code Flow.

---

<div class="post-metadata">

**Author:** ![leon](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/l/dc4da7/32.png) [@leon](https://www.ruby-forum.com/u/leon)\
**Post date:** [September 24, 2012, 11:36am UTC](https://www.ruby-forum.com/t/how-to-prohibit-a-client-certificate/223125/3 "2012-09-24T11:36:09Z")

</div>

于 2012/9/24 17:13, Sergey B. 写道:

> * * *
> 
> nginx mailing list  
> [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid)  
> [mailman.nginx.org archive](http://mailman.nginx.org/mailman/listinfo/nginx)

Thank you very much!

–  
Leon  
+86.13168330000  
[www.kingdest.com](http://www.kingdest.com)