server: disable client certificate verification on OPTIONS request

rucio · Nov 7, 2024 · 7d606e3 · 7d606e3
1 parent f354b67
commit 7d606e3
Showing 1 changed file with 6 additions and 3 deletions.
diff --git a/server/rucio.conf.j2 b/server/rucio.conf.j2
@@ -48,9 +48,12 @@ CacheRoot /tmp
  SSLVerifyClient optional_no_ca
  SSLVerifyDepth 10
  {% if require_x509_auth %}
- <Location /auth/x509/webui>    
-    SSLVerifyClient require
-    SSLVerifyDepth 10
+ <Location /auth/x509/webui>
+  SSLVerifyClient optional
+  <LimitExcept OPTIONS>
+   SSLVerifyClient require
+  </LimitExcept>
+  SSLVerifyDepth 10
  </Location>
 {% endif %}
 {% if RUCIO_HTTPD_LEGACY_DN|default('False') == 'True' %}