Skip to main content

Interface: $Properties

Properties of a MtlsAuthSpec.

Extended by​

Properties​

acceptedClientCa?​

optional acceptedClientCa?: Uint8Array<ArrayBufferLike> | null

The ca cert(s) in PEM format that the clients can use for authentication and authorization. This must only be one value, but the CA can have a chain. temporal:versioning:min_version=v0.2.0

acceptedClientCaDeprecated?​

optional acceptedClientCaDeprecated?: string | null

The base64 encoded ca cert(s) in PEM format that the clients can use for authentication and authorization. This must only be one value, but the CA can have a chain.

(-- api-linter: core::0140::base64=disabled --) Deprecated: Not supported after v0.2.0 api version. Use accepted_client_ca instead. temporal:versioning:max_version=v0.2.0

certificateFilters?​

optional certificateFilters?: $Properties[] | null

Certificate filters which, if specified, only allow connections from client certificates whose distinguished name properties match at least one of the filters. This allows limiting access to specific end-entity certificates. Optional, default is empty.

enabled?​

optional enabled?: boolean | null

Flag to enable mTLS auth (default: disabled). Note: disabling mTLS auth will cause existing mTLS connections to fail. temporal:versioning:min_version=v0.2.0