Skip to content

Support asgi tls extension #788

@enkore

Description

@enkore

Follow-up of #563

In #574 server-side mTLS was implemented, but the resulting client certificate is not communicated to the backend application in any way as far as I can tell. ASGI has an extension for doing so: https://asgi.readthedocs.io/en/latest/specs/tls.html

Also

#: build ctx
if client_verify and not ca:
logger.warning('SSL client verification requires a CA certificate, ignoring')
client_verify = False

... should this not be an error instead of semi-quietly turning client verification off?

Metadata

Metadata

Assignees

No one assigned

    Labels

    asgiIssue related to ASGI protocolenhancementNew feature or request

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions