cryostat-legacy icon indicating copy to clipboard operation
cryostat-legacy copied to clipboard

[Task] Add config to require specific JMX SSL cert(s)

Open andrewazores opened this issue 2 years ago • 0 comments

It is currently possible to configure Cryostat to trust/accept specific SSL certificates presented when opening a JMX connection, beyond the ones that are included in the trust store of the base image.

It should also be possible for the user to configure Cryostat to trust only certain certificates so that the user can be sure that Cryostat will only talk to target applications that present a certificate generated and trusted by the user specifically for this purpose.

TBD: how the user specifies these certs. Presumably this is done by some environment variable or a mounted secret. Does the user specify the filename of a cert file in the truststore or do they specify the cert's Common Name?

andrewazores avatar Sep 26 '22 19:09 andrewazores