tyk-operator icon indicating copy to clipboard operation
tyk-operator copied to clipboard

Published 20 hours ago • verified publisher icon TykTechnologies

[TT-5181] - Client to Gateway Authentication mTLS support

Open SudhakarNandigam-TomTom opened this issue 3 years ago • 2 comments
trafficstars

I see in API Definitions, Client to Gateway Authentication mTLS is not implemented status. Is there a plan to implement it?

SudhakarNandigam-TomTom avatar Apr 29 '22 07:04 SudhakarNandigam-TomTom

Hi @SudhakarNandigam-TomTom , thank you for your query.

Currently, we prioritise our feature roadmap based on customer demand. So raising requests here would definitely help. Could you let us know more about your use case?

caroltyk avatar Apr 29 '22 08:04 caroltyk

A kubernetes secret containing the CA certificate, Server Certificate (Signed by CA), and Private key is supplied to the Tyk gateway which can be used for both TLS and Client Auth. The client will then use the CA certificate, Client Certificate (Signed by CA) and Key to authenticate with the gateway. Also enable Certificate Revocation List verification.

SudhakarNandigam-TomTom avatar Apr 29 '22 09:04 SudhakarNandigam-TomTom