Details
-
New Feature
-
Status: Closed (View Workflow)
-
Major
-
Resolution: Won't Do
-
None
Description
Currently the TLS certificate of the client is not verified against the configured CA of the REST-API. Comparing this to MariaDB connections, it behaves as if a user was created with REQUIRE SSL but not REQUIRE X509. Adding support for the latter would require that the client's host is verified to be correct and signed by the configured CA or system CAs.