caddy icon indicating copy to clipboard operation
caddy copied to clipboard

add support for base64 encoded client certificate chain

Open xz64 opened this issue 9 months ago • 0 comments

We currently have support for base64 client certificate, but this only fetches the first certificate that the client sends. See #3767 for prior discussion on how support for this was added via tls_client_certificate_der_base64 . I propose we add a new one called tls_client_certificate_chain_der_base64 which gives the entire client certificate chain. Since HTTP headers can't have newlines in the value, I propose we do something likebase64(base64DerValues.join("\n")) to combine the client certificate chain into one header value.

#6920 is the PR for this.

xz64 avatar Mar 22 '25 02:03 xz64