Questions tagged [mtls]

Use for mutual TLS, a technology to enhance network security.

mTLS, or mutual TLS is common on Zero Trust Networking architectures to increase security in internal networks, especially when deployed in a cloud environment.

mTLS is often implemented with a Service Mesh in a Kubernetes cluster.

222 questions
0
votes
0 answers

MTLS for .net framework, not core

I'm tasked with implementing MTLS in .net framework, but the only resources I've been finding are for .net core. A lot of the packages we work with are old, so for the moment I have to be writing it in .net framework 4.5.2. All the resources I've…
orangejsx
  • 11
  • 2
0
votes
0 answers

When a kafka-clients mTLS handshake happens during its life-cycle?

I'm using the Java library kafka-clients 3.0.0 since I have a K8s cluster with 3 brokers and I need to produce/consume on topics through microservices. Both the Kafka brokers and clients have been correctly configured to authenticate clients through…
0
votes
1 answer

Distinguishing clients based on certificate

Will I be able to distinguish clients to my service in BizTalk orchestration based on mTLS client certificates? I need to route messages differently depending on who is calling me. Are there any good methods of doing that?
Piotr Grudzień
  • 179
  • 3
  • 11
0
votes
1 answer

I'm unable to fetch CNF value in the Token. My Identity Model package version 5.1.0

**I'm testing mTLS with the latest version of IdentityServer4 (straight from the repository). I've configured a client on the test site to use/require mTLS and this works perfectly. (I've verified that I cannot get a token without the client…
0
votes
1 answer

Health Checks for target instances over mTls

I have a passthrough Network Load Balance forwarding TCP requests to a target group of backend servers on AWS. We require mutual TLS authentication so all requests require client certificates to be passed for encryption and authentication. However,…
0
votes
1 answer

SSL Handshake error after Client Finished handshake message

I'm attempting to perform mutual TLS authentication to server.com (changed), and I'm getting Fatal (HANDSHAKE_FAILURE): Couldn't kickstart handshaking, javax.net.ssl.SSLException: readHandshakeRecord after Produced client Finished handshake…
Kallard
  • 11
  • 1
  • 5
0
votes
0 answers

IBM MQ Kubernetes Helm kdb

I have a Kubernetes IBM MQ deployment using ibm-mqadvanced-server-dev helm chart following this link. Suppose I have a kdb in the Kubernetes's ibm pod. Now I want to add client cert to the key database. But I don't want to access the bash of the…
Toami
  • 3
  • 4
0
votes
1 answer

Handling wallet expiry on Autonomous Database?

Is there is any way to get around the SSL certificates in the wallets expiring, having looked at the expiry date that is in the wallet.zip README file as well as the orapki utility. If one cannot get around SSL certificates expiring what is the…
Nilay Panchal
  • 541
  • 6
  • 17
0
votes
1 answer

The name 'CertificateAuthenticationDefaults' does not exist in the current context

I'm trying to configure mTLS authentication with ASP.NET core 3.1 by using the example from Microsoft Docs but getting the error below Error CS0103 The name 'CertificateAuthenticationDefaults' does not exist in the current context The code I'm…
Andy
  • 2,706
  • 3
  • 13
  • 22
0
votes
2 answers

unable to connect: error loading the X.509 key pair

I wrote a golang program which mTLS certs package main import ( "context" "fmt" "io" "log" "github.com/falcosecurity/client-go/pkg/api/outputs" "github.com/falcosecurity/client-go/pkg/client" …
Sathya
  • 69
  • 2
  • 8
0
votes
1 answer

mTLS validation and ngrok

I'm developing the integration of a Payment Method to Shopify which asks me to validate their (as client) requests using mTLS. Payments apps must implement mTLS to handle all* requests where they are acting as the server and Shopify as the client.…
0
votes
1 answer

Error while fetching Token with certificate & RSA Key in NodeJS

I am trying to fetch oauth token in NodeJS with key , certificate & client id. Code for the same: var form = { client_id : CLIENT_ID, grant_type: 'client_credentials', } var headers= { …
Atharva
  • 83
  • 7
0
votes
1 answer

ECC - RSA certificates in MTLS handshake Q

In our MTLS handshake, we have a client certificate issued using ECC and server certificate issued using RSA. We are seeing handshake errors at algorithm check since server does not have ecdsa algorithms, should client and server certificate be of…
iamcool76
  • 23
  • 1
  • 3
0
votes
0 answers

tls is working on mosquitto broker with self-signed certs but not with real certs

setup I'm trying to connect a Java client to a mosquitto MQTT broker using mutual TLS. The client and the broker are sitting on two separate virtual machines that are able to communicate with each other. I am attempting connection on port 8883. …
Rory Fahy
  • 11
  • 2
0
votes
1 answer

Docusign webhooks SignMessageWithX509Cert mTLS

Trying out mutualTLS in demo account and trying to understand how the validations work. We are using eventNotifications with signMessageWithX509Cert property set to true. However, have no clue if it is working as DocuSign gives no information about…