Add support for client TLS

jmgilman / vaultrs

An asynchronous Rust client library for the Hashicorp Vault API

https://docs.rs/vaultrs

MIT License

97 stars 60 forks source link

Add support for client TLS #62

Closed outscale-fba closed 7 months ago

outscale-fba commented 1 year ago

Add support for client TLS certificates in order to authenticates client side connections.

It uses vault environment variables (as specified here: https://developer.hashicorp.com/vault/docs/commands) as default values.

Implementation is done for the rustls feature and still need to be implemented for native-tls.

thorhs commented 8 months ago

I would really like to get this feature in, I'm currently working on a project that would require certificate login, this would help alot.

Haennetz commented 7 months ago

Hey, thanks for your pull request, and sorry for the delay. We should also add support for the VAULT_CACERT environment variable. With that the users can also use a custom CA to validate certs.

outscale-fba commented 7 months ago

Hello,

VAULT_CACERT env variable seems to be already supported here https://github.com/jmgilman/vaultrs/blob/master/src/client.rs#L235.

I there anything more to do ?

Haennetz commented 7 months ago

Sorry I missed that, thanks for pointing that out.