search

BetterCloud / vault-java-driver

Zero-dependency Java client for HashiCorp's Vault
https://bettercloud.github.io/vault-java-driver/
334 stars 224 forks source link

How to use cert auth backend with two way ssl #215

Open jsriram7 opened 4 years ago

jsriram7 commented 4 years ago

My vault server is configured to use tls_client_ca_file tls_require_and_verify_client_cert

I am using a two way ssl, where the server validates the client certificates as well.

Now when I am using two way ssl. I am providing the client certificates and client pem file through the clientPemFile() and clientKeyPemFile() of the SSLConfig class. https://github.com/BetterCloud/vault-java-driver/blob/master/src/main/java/com/bettercloud/vault/SslConfig.java

Now if i want to authenticate using cert login,

I will need to provide two client certificates 1, for two way ssl handshake

  1. the client certificate required for authenticating against the certificate role CA?

How will we achieve this