abhishek-ram/django-pyas2

mTLS

Aclopes opened this issue · 2 comments

How we connect using mTLS using pyAS2?

Currently I don't see that this is possible. Can you share some thoughts on how this should be implemented ?

My assumption is that:

  • an Organization would have another private/public key only for mTLS (a different key than used for signing/encryption) ?
  • then we would, on partner level, define the requirement for mTLS
  • when sending, we would have to pass the key to requests cert=('path/to/client/cert', 'path/to/client/key')

@chadgates, That is correct.
The Organization needs a new section and new fields to indicate we use MTLs, but the partner needs a Boolean field to indicate the mTLS required for these partners.