Add client certificate for mTLS playground

Author: pfcoperez

ancillary-docker-compose.yml

@@ -11,11 +11,13 @@ x-postgres-entrypoint: &postgres-entrypoint
     mkdir -p "$$DST"
     install -m 644 -o postgres -g postgres "$$SRC/server.crt" "$$DST/server.crt"
     install -m 600 -o postgres -g postgres "$$SRC/server.key" "$$DST/server.key"
+    install -m 644 -o postgres -g postgres "$$SRC/client.crt" "$$DST/ca.crt"
     exec docker-entrypoint.sh postgres \
       -c ssl=on \
       -c ssl_cert_file=$$DST/server.crt \
-      -c ssl_key_file=$$DST/server.key
-
+      -c ssl_key_file=$$DST/server.key \
+      -c ssl_ca_file=$$DST/ca.crt
+#ssl_ca_file is used for client certificate verification
 services:
   mongodb:
     container_name: peerdb-mongodb

volumes/pg-tls/client.crt

@@ -0,0 +1,19 @@
+-----BEGIN CERTIFICATE-----
+MIIDKzCCAhOgAwIBAgIUYB/6xkr4KiGTVXh5Ge5sj1vCrrQwDQYJKoZIhvcNAQEL
+BQAwEzERMA8GA1UEAwwIcG9zdGdyZXMwIBcNMjYwNjIyMTMzODI4WhgPMjEyNjA1
+MjkxMzM4MjhaMBMxETAPBgNVBAMMCHBvc3RncmVzMIIBIjANBgkqhkiG9w0BAQEF
+AAOCAQ8AMIIBCgKCAQEAm00jxWfKrN754yKmwGjzx/B0EBtiBBzDV8AjgJvg011l
+2W3PTbzK6nfX4hJJdiWzB6+pp3MwoSUl9yGQ7MFwbVJI/+T/TqSSKv/XegERy2V6
+ge7ZcvIXJzjPAqcq1Qhb+W+00IsbADOLWCQkBWJn+t4oym/WuXvai9qS2LqNdjHo
+U/L+XvcpyZwb4tSlq3f+33k2NUGg7nFMQK2azOA5WgA8ZoE95VFyAwo0R9lI3Zzp
+QWh+w1SC+x6D1pZEIG/04P+uyd58ETknUaXIjb1f8meCw6kTqzadlTNnwfJVEc8c
+M4vW5weXnnKEkE7wvzZMR56q+mg8HFHaPlGVNXdXAwIDAQABo3UwczAdBgNVHQ4E
+FgQUyem0KBlS1FZz8ARV6i9+ethonBkwHwYDVR0jBBgwFoAUyem0KBlS1FZz8ARV
+6i9+ethonBkwDAYDVR0TAQH/BAIwADAOBgNVHQ8BAf8EBAMCB4AwEwYDVR0lBAww
+CgYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQADggEBAJgZa/BOJ9bM4KBlBqg+jWOV
+W/uxJ5fzLJ33T8uP50Fx5+vT9nWGFKSxUqAl3mEyVlE10Okp+K9lrdM4DmW6mS6E
+Ne7Y1+KNCZrUlJgzmQ0234pqOvqqlv2B77VyqQaZB9DvX6WeiC+tsRjKm048Ps0y
+VbEXHVuQReBF2aKXYX7xiH3zEkYA7luy0K7+yTE0f4hhfzyecCuoVgRBHKwE6TKJ
+B38aHuFG4cGaE27GhA/K5/jL3Tb3BwkFEoNFXiLCnn6RHAvLOaS++4T+W7dcwyQV
+vW8/x0tXfzHJkpovE3EGtAJTBxp5kCgw5TIvYSpryR+Wg2fdODQxphAiV37fstk=
+-----END CERTIFICATE-----

volumes/pg-tls/client.key

@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----