# Ssl\_verify\_client on; for external connections only

**URL:** <https://www.ruby-forum.com/t/ssl-verify-client-on-for-external-connections-only/226111>\
**Category:** NGINX\
**Created:** [December 13, 2010, 10:23pm UTC](https://www.ruby-forum.com/t/ssl-verify-client-on-for-external-connections-only/226111 "2010-12-13T22:23:39Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![cschiewek](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/c/ac8455/32.png) [@cschiewek](https://www.ruby-forum.com/u/cschiewek)\
**Post date:** [December 13, 2010, 10:23pm UTC](https://www.ruby-forum.com/t/ssl-verify-client-on-for-external-connections-only/226111/1 "2010-12-13T22:23:39Z")

</div>

Hi all,

I have server setup that requires a client ssl cert. It’s working fine.  
The problem is I want to allow non-routable IPs (10.0.0.0/8,  
172.16.0.0/12, and 192.168.0.0/16) to connect without the client cert.  
I’ve tried moving the ssl\_verify\_client into an if block that checks the  
request address, but nginx complains that it’s not allowed there.

Anyway have any thoughts on how I could accomplish this?

Thanks,

Curtis

Posted at Nginx Forum:

> **[ssl\_verify\_client on; for external connections only](https://forum.nginx.org/read.php?2,158348,158348#msg-158348)**
>
> Hi all, I have server setup that requires a client ssl cert. It's working fine. The problem is I want to allow non-routable IPs (10.0.0.0/8, 172.16.0.0/12, and 192.168.0.0/16) to connect without the client cert. I've tried moving the...