Uploaded image for project: 'Nuxeo Drive '
  1. Nuxeo Drive
  2. NXDRIVE-2442

Implement mutual TLS authentication

    Details

    • Release Notes Summary:
      Implementation of mutual TLS authentication
    • Release Notes Description:
      Hide

      Drive is now compatible with servers that require mutual TLS authentication. The user can specify the paths to a client certificate and it's unencrypted key in the configuration file with the options cert-file and cert-key-file.

      Show
      Drive is now compatible with servers that require mutual TLS authentication. The user can specify the paths to a client certificate and it's unencrypted key in the configuration file with the options cert-file  and cert-key-file .
    • Sprint:
      nxDrive 11.2.13
    • Story Points:
      3

      Description

      User Story

      I want to use mutual TLS authentication, i.e., two-way SSL, where the client must present its own certificate and private key (see curl --cert and --key parameters).

      Scope

      Read the requests documentation about client-side certificates.

      Important note: The private key to the local certificate must be unencrypted.

      Actions:

      • Add the --cert and --key CLI arguments.
      • Add corresponding cert_file and cert_key_file options.
      • Add corresponding documentation.
      • Add the logic to use those files instead of any other options (like ca_bundle or ssl_no_verify).
      • Maybe more tricky but it would be very nice to have a test.
      • When the patch will be merged, backport the documentation part to the Nuxeo documentation website.

        Attachments

          Issue Links

            Activity

              People

              • Votes:
                0 Vote for this issue
                Watchers:
                6 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:

                  Time Tracking

                  Estimated:
                  Original Estimate - 0 minutes
                  0m
                  Remaining:
                  Remaining Estimate - 0 minutes
                  0m
                  Logged:
                  Time Spent - 4 days
                  4d

                    PagerDuty

                    Error rendering 'com.pagerduty.jira-server-plugin:PagerDuty'. Please contact your Jira administrators.