swift-server / swift-server/async-http-client

setup mTLS proxy server

Open
#776 6 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Swift
Stars
1.1k
Forks
156
PR merge metrics
No merged PRs in 30d

Description

We have a mTLS proxy server in DMZ, and client applications with auth certificate can send requests to private network through it. Currently I using iOS 17.0+ api:
ProxyConfiguration.init(
httpCONNECTProxy: NWEndpoint,
tlsOptions: NWProtocolTLS.Options? = nil
)

sec_protocol_challenge_t is called then proxy asks auth certificate and all proccess is working.

How to setup TLSConfiguration for certificate auth with mTLS proxy ?

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with the ProxyConfiguration.init(httpCONNECTProxy:tlsOptions:) API and the sec_protocol_challenge_t callback described in the issue. Investigate how TLSConfiguration represents client certificate authentication for an mTLS proxy and verify the behavior on iOS 17. Done means the supported setup is clearly documented or identified as requiring a project change.

Written by the indexing model from the issue text.

Assessment

Tech stack
ios, swift
Domain
networking, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.