Details
-
Improvement
-
Status: Resolved
-
Major
-
Resolution: Fixed
-
None
Description
Currently SSL certificate verification in Libprocess can be configured in the following ways:
(1) send certificate if in server mode, verify peer certificates if present;
(2) require valid peer certificates in both client and server modes.
It is currently impossible to configure a Libprocess instance to simultaneously:
(3) require valid peer certificate in client mode and send certificate in server mode.
Because Libprocess is often used by programs that act both as servers and clients, implementing (3) is necessary to enable the so-called webserver-browser model.
Attachments
Issue Links
- is related to
-
MESOS-9810 Reject certificate-less ciphers when certificate verification is enabled
- Resolved