tkuester / taky

A simple python TAK server
MIT License
188 stars 43 forks source link

Require a client certificate for DPS connections #20

Closed doug-fitzmaurice-rowden closed 3 years ago

doug-fitzmaurice-rowden commented 3 years ago

Gunicorn wasn't correctly checking the issuing CA of the presented client cert, hence the "unknown CA" error in ATAK/Curl.

do_handshake_on_connect isn't strictly required to make things work, but seems to be needed to access the CN of the client, which might be needed down the line

Fixes #4 , #17