Support mutual authentication between registered TLS clients and servers
Nobody has claimed this yet.
- Dominant language
- C++
- Stars
- 16
- Forks
- 7
- PR merge metrics
- No merged PRs in 30d
Description
The goal is to enable mutually-attested TLS between confidential services after their aDNS registrations. This involves extending the openssl patch for client authentication, e.g. so that the server endpoint does a DNS query to fetch the client TLSA record before accepting the connection, and testing it with some sample server application that verifies the resulting authenticated client name.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reviewing the existing OpenSSL patch and the server endpoint involved after aDNS registration. Trace how the endpoint could fetch a client TLSA record before accepting a connection, then identify how the sample server application should verify the authenticated client name. Done means mutual authentication works between registered confidential services and is demonstrated by that sample application.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- cpp
- Domain
- authentication, networking, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100