PelicanPlatform / xrdcl-pelican

A Pelican platform-based plugin for the XrdCl interface
Apache License 2.0
1 stars 3 forks source link

Allow plugin to use X.509 client authentication #9

Closed bbockelm closed 3 weeks ago

bbockelm commented 1 month ago

This introduces three new environment variables:

When set, the XRD_PELICANX509AUTHPREFIXESFILE is periodically parsed for prefixes (one prefix per line). If an incoming URL matches the prefix, then the connection to the origin will use the specified client certificate for authentication.

bbockelm commented 1 month ago

Marking as a draft; I want to also enable this behavior based on the presence of a header (X-Osdf-X509) in the director response.

bbockelm commented 3 weeks ago

Yes - this sounds like a good test for the PR.

Two notes: