varnish/hitch

client cert black list

Opened this issue · 4 comments

yiwiz-sai commented

Hi,
I know hitch added client certificate authentication in 1.6, it is a very cool function, thanks first.
I want to know if it supports client cert black list function, or is there a way to let hitch know a client cert is revoked ?

Thanks

gquintard commented

This is probably going to be a dumb proposition, but why not just reload hitch without that specific certificate?

yiwiz-sai commented

This is probably going to be a dumb proposition, but why not just reload hitch without that specific certificate?

for example, I create a server certificate to sign 100 client cert for my employee, and then one employee leaves, I want to revoke his client cert or add it into black list, do you know my mean?
that's why nginx has a ssl_crl options
http://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_crl

yiwiz-sai commented

what I am talking is client authentication

daghf commented

Hi @pianoboysai

Absolutely. This is a feature we would like to see added.

I can't give you a time frame right now, but we will come back to this at a later point.

  • 👍2
  • 😄1