randombit / botan

Cryptography Toolkit
https://botan.randombit.net
BSD 2-Clause "Simplified" License
2.59k stars 570 forks source link

Enabling Client Authentication via command line #4362

Closed mahabhu closed 1 month ago

mahabhu commented 1 month ago

for the template command for server: botan tls_server cert-or-pubkey key --port=443 --psk= --psk-identity= --psk-prf=SHA-256 --type=tcp --policy=default --dump-traces= --max-clients=0 --socket-id=0

my server works fine if i don't use any of the flags (other than port number), however, I couldn't figure out how to enable client authentication from server-side. Please suggest the appropriate command or provide the resource for command line documentation.

reneme commented 1 month ago

Currently the ./botan tls_server CLI tool does not provide a command line flag to specify a trusted credential for client authentication. Please refer to https://github.com/randombit/botan/issues/4026 for further details how to set up a test server in C++ that requires a client certificate.

I'm closing this as duplicate. Feel free to re-open if I missed something.