diff --git a/changelogs/unreleased/4796-gautierdelorme-minor.md b/changelogs/unreleased/4796-gautierdelorme-minor.md index 04ff04f61f9..7e3da98a3f1 100644 --- a/changelogs/unreleased/4796-gautierdelorme-minor.md +++ b/changelogs/unreleased/4796-gautierdelorme-minor.md @@ -1,5 +1,5 @@ ## Optional Client Certificate Validation -By default, client certificates are required but some applications might support different authentication schemes. +By default, when client certificate validation is configured, client certificates are required. You can now set the `httpproxy.spec.virtualhost.tls.clientValidation.optionalClientCertificate` field to `true`. A client certificate will be requested, but the connection is allowed to continue if the client does not provide one. If a client certificate is sent, it will be verified according to the other properties, which includes disabling validations if `httpproxy.spec.virtualhost.tls.clientValidation.skipClientCertValidation` is set.