2 Commits

Author	SHA1	Message	Date
Leo Galambos	7328f075dd	feat(pki-server): support trusted reverse-proxy authentication ... Support explicit direct-mTLS and trusted-reverse-proxy authentication modes with mutually authenticated backend transport. Keep proxy and end-client principals separate, validate forwarded certificates independently, and enforce narrowly scoped forwarding authority for RFC 9440 and NGINX escaped-PEM profiles.	2026-08-04 23:07:01 +02:00
Leo Galambos	e997996316	docs(pki): define server architecture and authorization model	2026-08-04 18:25:00 +02:00