Class: MtlsAuthSpec
Represents a MtlsAuthSpec.
Implements
Constructors
constructor
• new MtlsAuthSpec(properties?
): MtlsAuthSpec
Constructs a new MtlsAuthSpec.
Parameters
Name | Type | Description |
---|---|---|
properties? | IMtlsAuthSpec | Properties to set |
Returns
Properties
acceptedClientCa
• acceptedClientCa: Uint8Array
The ca cert(s) in PEM format that the clients can use for authentication and authorization. This must only be one value, but the CA can have a chain. temporal:versioning:min_version=v0.2.0
Implementation of
IMtlsAuthSpec.acceptedClientCa
acceptedClientCaDeprecated
• acceptedClientCaDeprecated: string
The base64 encoded ca cert(s) in PEM format that the clients can use for authentication and authorization. This must only be one value, but the CA can have a chain.
(-- api-linter: core::0140::base64=disabled --) Deprecated: Not supported after v0.2.0 api version. Use accepted_client_ca instead. temporal:versioning:max_version=v0.2.0
Implementation of
IMtlsAuthSpec.acceptedClientCaDeprecated
certificateFilters
• certificateFilters: ICertificateFilterSpec
[]
Certificate filters which, if specified, only allow connections from client certificates whose distinguished name properties match at least one of the filters. This allows limiting access to specific end-entity certificates. Optional, default is empty.
Implementation of
IMtlsAuthSpec.certificateFilters
enabled
• enabled: boolean
Flag to enable mTLS auth (default: disabled). Note: disabling mTLS auth will cause existing mTLS connections to fail. temporal:versioning:min_version=v0.2.0