Skip to main content

Interface: IMtlsAuthSpec

namespace.v1.IMtlsAuthSpec

Properties of a MtlsAuthSpec.

Implemented by

Properties

acceptedClientCa

Optional acceptedClientCa: null | string

The base64 encoded ca cert(s) in PEM format that the clients can use for authentication and authorization. This must only be one value, but the CA can have a chain.

(-- api-linter: core::0140::base64=disabled --)


certificateFilters

Optional certificateFilters: null | ICertificateFilterSpec[]

Certificate filters which, if specified, only allow connections from client certificates whose distinguished name properties match at least one of the filters. This allows limiting access to specific end-entity certificates. Optional, default is empty.


enabled

Optional enabled: null | boolean

Flag to enable mTLS auth (default: disabled). Note: disabling mTLS auth will cause existing mTLS connections to fail. temporal:versioning:min_version=2024-05-13-00