🔑 Add client cert auth

Open tobiasKaminsky opened this issue 2 years ago • 3 comments

This adds 8080 to be used with client cert auth. selfsigned-cli.p12 needs to be imported in browser's chain.

Password is empty.

Dec 19 '23 13:12 tobiasKaminsky

Can we name the files in a way that it's clear they are "localhost development" only, otherwise we will get useless h1 reports again

Jan 25 '24 11:01 nickvergessen

Sure. For my understanding the entire shallow-server/CI is for localhost dev or dev only.

What about something like"dev test key"?

Jan 26 '24 11:01 tobiasKaminsky

For my understanding the entire shallow-server/CI is for localhost dev or dev only.

Yes, we all know. But script kiddies searching repos for BEGIN PRIVATE KEY do not know what shallow server means. it could be a production thing.

What about something like"dev test key"?

👍🏼

Jan 26 '24 11:01 nickvergessen