bench icon indicating copy to clipboard operation
bench copied to clipboard

feat: allow nginx apply mtls for a specific path

Open HarryPaulo opened this issue 4 months ago • 1 comments

For this change to work on the bench, it is necessary to analyze the frappe pull request: https://github.com/frappe/frappe/pull/28125

Currently, some integrations that work with sensitive data are required to use mTLS, for example integration with credit card companies, banks, fintechs...

mTLS consists of validating whether the client is using a valid certificate to access the service, but it is a two-way validation, in this case it validates the client and server certificates.

image

Requests to the URL "/api/secure/{methodname}" will require mandatory validation at both ends of the digital certificate, thus applying mTLS validation by nginx.

ssl_verify_client optional was chosen because this method does not impact other URLs.

HarryPaulo avatar Oct 14 '24 11:10 HarryPaulo