mTLS - Githubissues

abhishek-ram / django-pyas2

AS2 file transfer Server built on Python and Django.

https://django-pyas2.readthedocs.io

GNU General Public License v3.0

78 stars 31 forks source link

mTLS #104

Open Aclopes opened 8 months ago

Aclopes commented 8 months ago

How we connect using mTLS using pyAS2?

chadgates commented 4 months ago

Currently I don't see that this is possible. Can you share some thoughts on how this should be implemented ?

My assumption is that:

an Organization would have another private/public key only for mTLS (a different key than used for signing/encryption) ?
then we would, on partner level, define the requirement for mTLS
when sending, we would have to pass the key to requests cert=('path/to/client/cert', 'path/to/client/key')

Aclopes commented 4 months ago

@chadgates, That is correct. The Organization needs a new section and new fields to indicate we use MTLs, but the partner needs a Boolean field to indicate the mTLS required for these partners.