pomerium/integration/tpl/files/downstream-2-client.pem
Kenneth Jenkins 3ebee1159c
add downstream mTLS integration test cases (#4234)
* integration test config: add downstream mTLS routes

Add two new CA certificates for use with downstream mTLS tests, and a
client certificate/key pair issued by each CA.

Add a few routes to the policy template that require a client CA. Update
the generated output configurations.

(based on commit ed63a6a6e7)

* add downstream mTLS integration test cases

These are modeled after the tests added to v0.17 in 83957a9, but here
the expected behavior is that requests with an invalid client
certificate will receive a 495 response only after authentication.
2023-06-13 10:25:21 -07:00

23 lines
1.4 KiB
Text

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----