switchboard/core
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Releases 9 Wiki Activity

Feat v0.6.7 native mtls #42

Merged
xcaliber merged 1 commits from feat/v0.6.7-native-mtls into main 2026-03-31 18:36:13 +00:00
Conversation 0 Commits 1 Files Changed 14 +1138 -209
xcaliber commented 2026-03-31 18:32:50 +00:00
Owner
Copy Link
No description provided.
xcaliber added 1 commit 2026-03-31 18:32:51 +00:00
Feat v0.6.7 native mTLS (#42)
All checks were successful
CI/CD / detect-changes (pull_request) Successful in 4s
Details
CI/CD / test-frontend (pull_request) Successful in 6s
Details
CI/CD / test-go-pg (pull_request) Successful in 2m44s
Details
CI/CD / test-sqlite (pull_request) Successful in 2m50s
Details
CI/CD / build-and-deploy (pull_request) Successful in 1m4s
Details
1b095d50be 
End-to-end mutual TLS without a reverse proxy. Go binary terminates
TLS itself via ListenAndServeTLS. TLS_MODE config (none/server/mtls)
is independent of AUTH_MODE.

- MTLSNativeProvider reads PeerCertificates directly (no header trust)
- Shared helpers extracted to mtls_helpers.go (ParseDN, FingerprintCert)
- MTLSProvider renamed to MTLSProxyProvider for clarity
- BuildPeerTLSConfig for future node-to-node mTLS
- switchboard-ca.sh: CA init, issue-node, issue-user (ECDSA P-256)
- 12 new tests (unit + TLS integration)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
xcaliber merged commit fb5284f667 into main 2026-03-31 18:36:13 +00:00
xcaliber deleted branch feat/v0.6.7-native-mtls 2026-03-31 18:36:13 +00:00
This repo is archived. You cannot comment on pull requests.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Assignees
Clear assignees
xcaliber
No Assignees
1 Participants
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: switchboard/core#42
Delete Branch "feat/v0.6.7-native-mtls"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?