need a rule to force client certs

Thanks, that did get me started. Now I have this:

when HTTP_REQUEST {
if {[HTTP::uri] starts_with "/ASITE/" }
{HTTP::collect [HTTP::header Content-Length]
SSL::cert mode require
SSL::renegotiate}
else
{SSL::cert mode request
}
}

but it doesn't work.

Originally I had an HTTP::release after the SSL::cert mode request in the else statement, but I don't know what that's supposed to do.

On the server side, I've got the Apache set up, that when a call to /ASITE/ comes in, it redirects to the real site URI, so I figured, at that point it would only request the client cert, and not require it.

Thoughts?

Tom