git-ecosystem / git-bundle-server

A web server & management CLI to host Git bundles for use with Git's "bundle URIs" feature
Other
43 stars 20 forks source link

Add option to configure client certificate authentication #40

Closed vdye closed 1 year ago

vdye commented 1 year ago

There are two main changes in this PR:

  1. (Commit 1) Add a --tls-version option to git-bundle-web-server/git-bundle-server web-server to set the minimum acceptable TLS version for the web server. Request using a lower version will be rejected; default TLS v1.2.
  2. (Commits 2-3) Add a --client-ca option to git-bundle-web-server/git-bundle-server web-server to allow users to specify a certificate authority against which client requests must be validated. Also include a guide on how to set up mTLS using this option & the existing --cert/--key when cloning with a bundle URI from Git.