Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add support for mTLS between proxy and OIDC issuer #352

Open
alegacy opened this issue Jan 14, 2025 · 1 comment
Open

Add support for mTLS between proxy and OIDC issuer #352

alegacy opened this issue Jan 14, 2025 · 1 comment

Comments

@alegacy
Copy link

alegacy commented Jan 14, 2025

To support operating in environments that enforce/require client TLS certificates it would be helpful to support mTLS configurability between the proxy and the OIDC issuer.

This would involving adding new command line arguments to specify a TLS certificate and private key. For example, something like:

	flagset.StringVar(&o.Auth.Authentication.OIDC.ClientCertFile, "oidc-client-cert-file", "", "If set, the client certificate will be used to authenticate the proxy to the OIDC server. Requires --oidc-client-key-file to be set, too.")
	flagset.StringVar(&o.Auth.Authentication.OIDC.ClientKeyFile, "oidc-client-key-file", "", "The key matching the certificate from --oidc-client-cert-file. If set, requires --oidc-client-cert-file to be set, too.")
@alegacy
Copy link
Author

alegacy commented Jan 14, 2025

I've got a PR ready to go for this. Waiting for #323 to merge before submitting it since there is a dependency on that PR to enable testing the functionality.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant