You can use the mtls policy to verify a client certificate exists as part of the request.
This policy does not ensure that certificates are valid, since it is done directly by the server.
You can use the response template feature to override the default response provided by the policy. These templates must be defined at the API level (see the API Console Response Templates option in the API Entrypoints > Response Templates menu).
The error keys sent by this policy are as follows:
| Key | Parameters |
|---|---|
CLIENT_CERTIFICATE_MISSING |
- |
CLIENT_CERTIFICATE_INVALID |
- |
SSL_SESSION_REQUIRED |
- |