1Panel-dev / 1Panel-dev/1Panel

[Feature] Support Mutual TLS (mTLS) for OpenResty Websites

Open
#11,881 1 comment 0 reactions 1 assignee View on GitHub

@wanghe-fit2cloud is already working on this.

Since Feb 11, 2026.

type: feature-request
Dominant language
Go
Stars
37k
Forks
3.4k
Avg merge
9h 16m
Merged PRs (30d)
105

Description

1Panel Version

v2.0.17

Please describe your needs or suggestions for improvements

希望在 1Panel 的 OpenResty 网站配置界面中,增加对 mTLS(双向认证) 的支持,包括以下能力:

  1. 启用/禁用 mTLS 开关
    在网站设置或 SSL 设置页面中,提供一个选项用于开启双向认证。

  2. 上传/选择 CA 证书
    允许用户指定用于验证客户端证书的 CA 证书。

  3. 配置验证模式
    支持设置 ssl_verify_client 的策略:

    • off:默认,不验证客户端(当前行为)
    • on:强制验证,失败则拒绝连接
    • optional:尝试验证,但即使失败也允许连接(可用于日志审计)
Please describe the solution you suggest

No response

Additional Information

No response

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.