daml icon indicating copy to clipboard operation
daml copied to clipboard

Log CN of client cert that authenticates with ledger. Document requirements around cert format and any checks done on cert

Open nycnewman opened this issue 5 years ago • 0 comments

When Mutual TLS enabled, it would be good to have:

  • details of client logged for audit purposes
  • documentation on any mandatory requirements around cert formats (i.e. PKCS8 instead of PKCS1)
  • documentation on what checks are made on certs (server or client) around revocation (CRL or OCSP) by server, any cert attributes, etc
  • documentation on what, if any, linkage between client cert and authentication, authorization decisions within Ledger

nycnewman avatar Aug 05 '20 19:08 nycnewman