pomerium/integration/tpl/files/downstream-1-client.pem
Kenneth Jenkins 3ebee1159c
add downstream mTLS integration test cases (#4234)
* integration test config: add downstream mTLS routes

Add two new CA certificates for use with downstream mTLS tests, and a
client certificate/key pair issued by each CA.

Add a few routes to the policy template that require a client CA. Update
the generated output configurations.

(based on commit ed63a6a6e7)

* add downstream mTLS integration test cases

These are modeled after the tests added to v0.17 in 83957a9, but here
the expected behavior is that requests with an invalid client
certificate will receive a 495 response only after authentication.
2023-06-13 10:25:21 -07:00

23 lines
1.4 KiB
Text

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----