Haritz S. Sierra
Haritz S. Sierra
Any update on this? I think the Topology Builder change is quite necessary
For sure I need to set optional to true, but I also need to define caCertificateRefs with a valid secret so that the server will send the client certificate request...
@arkodg Hi, forgot to reply. With this configuration, you achieve that (not defining the `trusted_ca` param): ``` transport_socket: name: envoy.transport_sockets.tls typed_config: "@type": type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext common_tls_context: tls_certificates: - certificate_chain: { filename: "/certs/bundle.crt"...
Hi @arkodg could you take a look at this commit? I've tried to implement what's missing, but I'm not sure it's implemented correctly. Could you have a look at it?...
If you are not in favour of implementing this feature, do you have any suggestions on how to achieve it? Perhaps using other proxies in fronnt of EG? I am...
Any chance we could get a quick update on when a version bump might happen? Thanks for the awesome work!