关于apisix双向认证的功能

[feichenxue]

Description

有点类似于配置nginx开启客户端认证的配置
这里只列出server段的关键部分：
ssl_certificate /etc/pki/ca_linvo/server/server.crt;#server公钥
ssl_certificate_key /etc/pki/ca_linvo/server/server.key;#server私钥
ssl_client_certificate /etc/pki/ca_linvo/root/ca.crt;#根级证书公钥，用于验证各个二级client
ssl_verify_client on;

我看了apisix文档好像没有这一方面的配置！

[tzssangglass]

ref: https://github.com/apache/apisix/blob/master/docs/zh/latest/mtls.md

https://github.com/apache/apisix/blob/master/docs/zh/latest/certificate.md#%E8%AE%BE%E7%BD%AE%E5%A4%9A%E4%B8%AA-ca-%E8%AF%81%E4%B9%A6

[juzhiyuan]

Hi @feichenxue, there also has one tutorial: https://apisix.apache.org/docs/apisix/next/tutorials/client-to-apisix-mtls/

Does it meet your needs? If yes, please close this issue :)

[wangyp0701]

After configuring the ca certificate, you can access it, but you cannot control the required CN. Now all the issued ca certificates can be authenticated successfully.

https://apisix.apache.org/docs/ingress-controller/references/apisix_tls_v2/ No parameter to set CN

What is the way to realize it? According to CN

[feichenxue]

Thanks for everyone's help！