Skip to content

Commit ea49745

Browse files
authored
Update app-service-web-configure-tls-mutual-auth.md
1 parent 5f49ad0 commit ea49745

File tree

1 file changed

+4
-4
lines changed

1 file changed

+4
-4
lines changed

articles/app-service/app-service-web-configure-tls-mutual-auth.md

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@ ms.custom: devx-track-csharp, devx-track-extended-java, devx-track-js, devx-trac
1212
---
1313
# Configure TLS mutual authentication for Azure App Service
1414

15-
You can restrict access to your Azure App Service app by enabling different types of authentication for it. One way to do it is to request a client certificate when the client request is over TLS/SSL and validate the certificate. This mechanism is called TLS mutual authentication or client certificate authentication. This article shows how to set up your app to use client certificate authentication.
15+
You can restrict access to your Azure App Service app by enabling different types of authentication for it. One way to do it is to request a client certificate when the client request is over TLS/SSL and validate the certificate. This mechanism is called Transport Layer Security (TLS) mutual authentication or client certificate authentication. This article shows how to set up your app to use client certificate authentication.
1616

1717
> [!NOTE]
1818
> Your app code is responsible for validating the client certificate. App Service doesn't do anything with this client certificate other than forwarding it to your app.
@@ -125,11 +125,11 @@ Client certificate configurations that use TLS renegotiation cannot support inco
125125

126126
To address the 100 kb limit, consider these alternative solutions:
127127

128-
1. Update your app's client certificate configuration with _all_ these settings:
128+
1. Update your app's client certificate configurations with _all_ these settings:
129129
- Set client certificate mode to either "Required" or "Optional"
130130
- Remove all client certificate exclusion paths
131-
1. Send a HEAD request before the PUT/POST request. The HEAD request will handle the client certificate.
132-
1. Add the header `Expect: 100-Continue` to your request. This will cause the client to wait until the server responds with a `100 Continue` before sending the request body, which bypasses the buffers.
131+
1. Send a HEAD request before the PUT/POST request. The HEAD request handles the client certificate.
132+
1. Add the header `Expect: 100-Continue` to your request. This causes the client to wait until the server responds with a `100 Continue` before sending the request body, which bypasses the buffers.
133133

134134
## Access client certificate
135135

0 commit comments

Comments
 (0)