question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

x.509 SSL Client Certificate Authentication

See original GitHub issue

I have several web (HTTPS) services that are served with an SSL certificate signed by a custom CA. Furthermore, access is then controlled by x.509 client certificates - in other words, the visitor is prompted to provide a client SSL certificate signed by an appropriate CA.

At the moment, it’s impossible to monitor these with uptime-kuma. Even if I provide the root CA, the connection will still be rejected as the uptime ping doesn’t send a client certificate with the request, along the lines of:

curl --cacert <ca.crt> --cert <client.cert> --key <client.key> https://secure.example.com/

A desirable solution would allow for attaching a custom root CA, client certificate and client key (or .p12 / .pfx bundle) for each monitor that would be used for HTTPS pings.

Issue Analytics

  • State:open
  • Created 2 years ago
  • Reactions:8
  • Comments:7 (2 by maintainers)

github_iconTop GitHub Comments

2reactions
louislamcommented, Aug 1, 2021

Similar feature “Ignore TLS Error” will be available in the next release.

1reaction
gabycommented, Sep 7, 2021

+1 for adding this feature. It would be very beneficial for enterprise environments.

Read more comments on GitHub >

github_iconTop Results From Across the Web

What is the difference between an X.509 "client certificate" and ...
An X509 Certificate is a type of public key in a public/private key pair. These key pairs can be used for different things,...
Read more >
Authentication With X.509 Certificates - The Couchbase Blog
Certificate based authentication is built by leveraging the X.509 public key infrastructure (PKI) standard. Certificate authentication offers ...
Read more >
Client authentication using X.509 certificates - IBM
RSE daemon supports users authenticating themselves with an X.509 certificate. Using SSL encrypted communication is a prerequisite for this function, ...
Read more >
X.509 user certificate authentication with Red Hat SSO
Configure a browser authentication flow using X.509 user-signed certificates with Red Hat's single sign-on technology and OpenSSL.
Read more >
What an X.509 Certificate Is & How It Works | Sectigo® Official
509 certificate is that it is architected using a key pair consisting of a related public key and a private key. Applied to...
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found