This is a public Idea Center  publicRSS

Idea

    1 liked this

    Support Mutual TLS and / or HTTP Signature?
    Idea posted October 31, 2017 by Simon StryjakRookie, tagged Customer Portal, Other 
    32 Views
    Title:
    Support Mutual TLS and / or HTTP Signature?
    User Story / Description:

    Have OSvC Support one or both of these:

    1. Support Mutual TLS?

    Can OSvC be provisioned with a client certification and participate in Mutual TLS with an API endpoint?

    Assuming yes, then it would be technically possible to do this:

    OSvC -> mutual TLS required -> API Gateway Proxy -> Generate required JWT -> OAPI w/JWT

     

    2. If no to 1, then possibly support HTTP Signature?

    The spec is here - https://tools.ietf.org/html/draft-cavage-http-signatures-00.