Client certificate authentication

[marcoslater]

Hi!

Is there a known way to allow Caddy to request and validate client certificates?

I plan to use this for a secure area, wanted to know if I could rely on caddy for it.

Thanks!

[elcore (Eldin)]

Hello @marcoslater,

Yes – https://caddyserver.com/docs/tls

tls [cert key] {
    clients   [request|require|verify_if_given|] clientcas...
}

Note: https://github.com/mholt/caddy/issues/829 and crypto/tls: allow choosing ClientAuth (and others?) based on SNI · Issue #15707 · golang/go · GitHub

[marcoslater]

Huh! That page changed since the last time I looked!

Blazing fast development here.

Thank you!