Skip to content

feat: add mTLS client certificate support#156

Merged
phillipleblanc merged 1 commit into
trunkfrom
phillip/mtls-client-cert
May 12, 2026
Merged

feat: add mTLS client certificate support#156
phillipleblanc merged 1 commit into
trunkfrom
phillip/mtls-client-cert

Conversation

@phillipleblanc
Copy link
Copy Markdown
Contributor

Adds mTLS (mutual TLS) client certificate support, allowing the SDK to present a client certificate during the TLS handshake when connecting to a Spice runtime with client_auth_mode: request or client_auth_mode: required.

Usage

Provide the paths to a PEM-encoded client certificate and private key file when building the client. The certificate is presented to the server during the TLS handshake.

Notes

  • mTLS is an Enterprise feature of the Spice runtime.
  • Both the certificate and key file must be provided together.
  • When not set, the client behaves exactly as before (standard TLS).
  • See the mTLS cookbook recipe for a complete walkthrough.

@phillipleblanc phillipleblanc self-assigned this May 12, 2026
@phillipleblanc phillipleblanc force-pushed the phillip/mtls-client-cert branch 3 times, most recently from 331a14d to bbbf7ec Compare May 12, 2026 12:56
@phillipleblanc phillipleblanc force-pushed the phillip/mtls-client-cert branch from bbbf7ec to 55253d5 Compare May 12, 2026 23:29
@phillipleblanc phillipleblanc force-pushed the phillip/mtls-client-cert branch from 55253d5 to 1106154 Compare May 12, 2026 23:51
@phillipleblanc phillipleblanc merged commit 5c8b75e into trunk May 12, 2026
66 checks passed
@phillipleblanc phillipleblanc deleted the phillip/mtls-client-cert branch May 12, 2026 23:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants