Apacheのクライアント認証をIPアドレスによっては不要にしてみる - mechamogera/MyTips GitHub Wiki

<VirtualHost *:443>
  DocumentRoot /var/www/html

  SSLEngine on
  SSLProtocol all -SSLv2
  SSLCipherSuite ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+LOW
  SSLCertificateFile /etc/pki/tls/certs/server.crt
  SSLCertificateKeyFile /etc/pki/tls/private/server.key

  SSLVerifyClient optional
  SSLCACertificateFile /etc/pki/example/cacert.pem

  <Directory /var/www/html>
    Options FollowSymLinks
    AllowOverride None
    Order allow,deny
    allow from all

    SSLRequire (%{REMOTE_ADDR} =~ m/^192\.168\.0\.1$/) \
                or \
               (%{SSL_CLIENT_VERIFY} eq "SUCCESS")
  </Directory>
</VirtualHost>