mtls-transmitter

mtls-transmitter is a simple reverse proxy that injects client certificate for mTLS communication. It creates a reverse proxy that injects client certificate to incomming http requests and routes them to the https endpoint.

Building the binary

$ go build -o mtls-transmitter ./cmd/transmitter

Running the binary

$ ./mtls-transmitter -cert=/path/to/cert.pem -key=/path/to/key.pem -url=desired.host.com [-port=8080] [-skip-ssl]

Parameters

Parameters can also be set as flags or as environment variables, with flags attempting to take precedence.

Flag	Env Var	Description
`-cert`	`CERT`	The path to the client certificate; required
`-key`	`KEY`	The path to the client certificate key; required
`-url`	`URL`	The `hostname:port` to which the proxy fowards requests; required
`-port`	`PORT`	The port on which the proxy listens on; default: `8080`
`-skip-ssl`	`SKIP_SSL`	If set to `true`, the proxy sill skip server certificate verification; default: `false`
`-silent`	`SILENT`	If set to `true`, the proxy will not log proxied events; default: `false`

Running inside the docker container

Building

$ docker build -t crabtree/mtls-transmitter .

Running

NOTE: To run mtls-transmitter inside the docker container you need to provide your client certificate to your container.

$ docker run --rm -v /path/to/cert-dir:/cert -p 8080:8080 crabtree/mtls-transmitter -cert /cert/cert.pem -key /cert/key.pem -url desired.host.com

Development

Use the following:

make          # to format and validate changes
make build    # to build the binary

See the Makefile for additional options.

jmervine/mtls-transmitter