How to disable client authentication for https?

fabiolb / fabio

Consul Load-Balancing made simple

https://fabiolb.net

MIT License

7.25k stars 619 forks source link

How to disable client authentication for https? #765

Closed vilva42 closed 4 years ago

vilva42 commented 4 years ago

We are planning to replace a load balancer with Fabio. In our current setup, the load balancer terminates SSL and the client hitting the LB doesn't present a certificate. With Fabio, we get the following error http: TLS handshake error from 127.0.0.1:44846: tls: client didn't provide a certificate

Is there a way to disable client authentication or a workaround?

vilva42 commented 4 years ago

If I remove this line from the code, I'm able to curl it

nathanejohnson commented 4 years ago

This should only get hit if you provide client CA's?

vilva42 commented 4 years ago

We were running into this error even when the client CA wasn't being provided. I don't have the environment anymore to reproduce the error, so closing this issue.