Skip to content

fix: Support secrets for client ca#13061

Open
cybersec-jochenarnold wants to merge 1 commit intoapache:masterfrom
cybersec-jochenarnold:fix/secrets_in_ssl_client_ca
Open

fix: Support secrets for client ca#13061
cybersec-jochenarnold wants to merge 1 commit intoapache:masterfrom
cybersec-jochenarnold:fix/secrets_in_ssl_client_ca

Conversation

@cybersec-jochenarnold
Copy link

Description

Allow secrets like env or secret for client ca in ssl config.
Useful to fetch ca cert directly from e.g. Vault.

Which issue(s) this PR fixes:

Fixes #13021

Checklist

  • I have explained the need for this PR and the problem it solves
  • I have explained the changes or the new features added to this PR
  • I have added tests corresponding to this change
  • I have updated the documentation to reflect this change
  • I have verified that this change is backward compatible (If not, please discuss on the APISIX mailing list first)

@cybersec-jochenarnold cybersec-jochenarnold marked this pull request as ready for review March 2, 2026 19:11
@dosubot dosubot bot added size:L This PR changes 100-499 lines, ignoring generated files. bug Something isn't working labels Mar 2, 2026
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think you can move the test case to client-mtls.t https://github.com/apache/apisix/blob/16b9d7e5b611a729c6eb99d3fbca6c8bce71f494/t/node/client-mtls.t, since the test cases involve mTLS (client side verification)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug Something isn't working size:L This PR changes 100-499 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants