Skip to content

feat: add mTLS client certificate support - #72

Merged
phillipleblanc merged 1 commit into
trunkfrom
phillip/mtls-client-cert
May 13, 2026
Merged

feat: add mTLS client certificate support#72
phillipleblanc merged 1 commit into
trunkfrom
phillip/mtls-client-cert

Conversation

@phillipleblanc

Copy link
Copy Markdown
Contributor

Adds mTLS (mutual TLS) client certificate support, allowing the SDK to present a client certificate during the TLS handshake when connecting to a Spice runtime with client_auth_mode: request or client_auth_mode: required.

Usage

Provide the paths to a PEM-encoded client certificate and private key file when building the client. The certificate is presented to the server during the TLS handshake.

Notes

  • mTLS is an Enterprise feature of the Spice runtime.
  • Both the certificate and key file must be provided together.
  • When not set, the client behaves exactly as before (standard TLS).
  • See the mTLS cookbook recipe for a complete walkthrough.

@phillipleblanc phillipleblanc self-assigned this May 12, 2026
@phillipleblanc
phillipleblanc force-pushed the phillip/mtls-client-cert branch 2 times, most recently from 6c014c9 to 47814a8 Compare May 12, 2026 12:35
@phillipleblanc
phillipleblanc force-pushed the phillip/mtls-client-cert branch 5 times, most recently from bc815b0 to 2335696 Compare May 13, 2026 00:41
@phillipleblanc
phillipleblanc force-pushed the phillip/mtls-client-cert branch from 2335696 to f5ce6aa Compare May 13, 2026 00:52
@phillipleblanc
phillipleblanc merged commit 418e439 into trunk May 13, 2026
9 checks passed
@phillipleblanc
phillipleblanc deleted the phillip/mtls-client-cert branch May 13, 2026 01:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants