API Management forwarded client certificate validation

Question

Is it possible to validate client certificates coming in an HTTP header forwarded from a proxy? The same as in https://learn.microsoft.com/en-us/azure/app-service/app-service-web-configure-tls-mutual-auth#access-client-certificate or https://www.ietf.org/archive/id/draft-bdc-something-something-certificate-01.html
Now we check it with (context.Request.Certificate==null || !context.Request.Certificate.VerifyNoRevocation())), the question is whether we can set the context.Request.Certificate from the header

Answer 1

@Ferenc Szabó Since its available in the header, you could just import the certificate as an object and then call VerifyNoRevocation() on it to validate it.

Then you can use the authentication-certificate policy to set the certificate in the request to the backend.