custodia icon indicating copy to clipboard operation
custodia copied to clipboard

Documentation: Missing certifacate options in SimpleClientCertAuth

Open celestian opened this issue 8 years ago • 2 comments

It could be little confusing that we cannot see notes about how to tell Custodia which certificate we would like to use.

celestian avatar Jun 08 '17 11:06 celestian

Custodia currently accepts all valid client certificate that are trusted by the CA (global option tls_cafile). There is no additional filtering or support for CRL or OCSP status checks.

IMO we should recommend Apache mod_ssl or other TLS terminates to perform these checks for us.

tiran avatar Jun 29 '17 12:06 tiran

+1

simo5 avatar Jun 29 '17 12:06 simo5