processone/ejabberd-contrib

HTTP authentication module (ejabberd_auth_http): adding client certificate to requests?

vkelman opened this issue · 0 comments

Our application has government requirement for all HTTP requests to include SSL client certificate. All application servers are checking incoming requests for client certificates.

I realized that requests issued by ejabberd_auth_http does not include client certificate (it uses https://github.com/esl/fusco to make requests and fusco doesn't seem to support it).

Is there any possibility to switch to another library supporting sending client certificates?
Otherwise and unfortunately we would be forced to switch back to using external authentication script.