Skip to content

Attested certificate verifier should require client authentication#38

Merged
ameba23 merged 1 commit intomainfrom
peg/attested-verifier-always-request-client-auth
Apr 29, 2026
Merged

Attested certificate verifier should require client authentication#38
ameba23 merged 1 commit intomainfrom
peg/attested-verifier-always-request-client-auth

Conversation

@ameba23
Copy link
Copy Markdown
Collaborator

@ameba23 ameba23 commented Apr 29, 2026

When an AttestedClientVerifier is used in a rustls ServerConfig for client authentication, this means the server wants the client to authenticate.

This PR makes it so that the trait methods relevant to requiring client authentication unconditionally return true, to require clients to authenticate.

@ameba23 ameba23 requested a review from 0x416e746f6e April 29, 2026 07:56
@ameba23 ameba23 merged commit e741fe0 into main Apr 29, 2026
2 checks passed
@ameba23 ameba23 deleted the peg/attested-verifier-always-request-client-auth branch April 29, 2026 10:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants