The DataScript function avi.ssl.check_client_cert_validity() is used to expose the different outcomes of client certificate validation and the following are the values for different states:

  • The value is zero when the certificate is not presented by the client.

  • The value is one when the certificate is presented by the client and successfully validated.

  • The value is two when the certificate is presented by the client but not valid.

For more information, see the Enabling Client Certificate Authentication topic in the VMwareNSX Advanced Load BalancerConfiguration Guide.