Leo Galambos 7328f075dd feat(pki-server): support trusted reverse-proxy authentication ...

Support explicit direct-mTLS and trusted-reverse-proxy authentication
modes with mutually authenticated backend transport.

Keep proxy and end-client principals separate, validate forwarded
certificates independently, and enforce narrowly scoped forwarding
authority for RFC 9440 and NGINX escaped-PEM profiles.

2026-08-04 23:07:01 +02:00

2.8 KiB

Raw Blame History

View Raw