Client Certificate authentication?

[juju4]

Hello

Do you include any client authentication mechanisms? Or should go through nginx and web client certificates.

Thanks

[np5]

Hello,

We use a signed token + the serial number. The serial number is not signed because it is set in the postinstall script of the enrollment packages.

We haven't worked on client certificates yet. It could work pretty well with the serial number as the CommonName and the business unit reference as the OrganizationalUnit. The server terminating the TLS connection would have to put the Subject in an extra Header that Zentral could use.