Skip to content

Commit 067b5d0

Browse files
authored
Minor edits
1 parent 1981538 commit 067b5d0

File tree

1 file changed

+5
-2
lines changed

1 file changed

+5
-2
lines changed

articles/app-service/app-service-web-configure-tls-mutual-auth.md

Lines changed: 5 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -113,14 +113,17 @@ App Service requires TLS renegotiation to read a request before knowing whether
113113
1. Use "Optional Interactive User" client certificate mode.
114114
1. Use [client certificate exclusion path](#exclude-paths-from-requiring-authentication).
115115

116+
> [!NOTE]
117+
> TLS 1.3 and HTTP 2.0 don't support TLS renegotiation. If you configure your app with these protocols, they won't work with client certificate settings that use TLS renegotiation.
118+
116119
To disable TLS renegotiation and to have the app negotiate client certificates during TLS handshake, you must configure your app with *all* the settings below:
117120
1. Set client certificate mode to "Required" or "Optional"
118121
2. Remove all client certificate exclusion paths
119122

120123
### Uploading large files with TLS renegotiation
121-
Client certificate configurations that uses TLS renegotiation cannot support incoming requests with large files greater than 100kb. TLS renegotiation will fail any POST or PUT requests using large files with a 403 error.
124+
Client certificate configurations that uses TLS renegotiation cannot support incoming requests with large files greater than 100kb due to buffer size limitations. In this scenario, any POST or PUT requests over 100kb will fail with a 403 error. This limit is not configurable and cannot be increased.
122125

123-
To resolve the error due to large files greater than 100kb due to TLS renegotiation, here are known alternative solutions to address the limitations:
126+
Below are the only available alternative solutions to address the 100kb limit:
124127

125128
1. Update your app's client certificate configuration to meet _all_ requirements below:
126129
1. Set client certificate mode to either "Required" or "Optional"

0 commit comments

Comments
 (0)