automtls: fix bidirectional communication and cert format

hashicorp · Apr 22, 2022 · 0d4e9d8 · 0d4e9d8
1 parent 73def4e
commit 0d4e9d8
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/mtls.go b/mtls.go
@@ -29,6 +29,10 @@ func generateCert() (cert []byte, privateKey []byte, err error) {
 	host := "localhost"
 
 	template := &x509.Certificate{
+		Issuer: pkix.Name{
+			CommonName:   host,
+			Organization: []string{"HashiCorp"},
+		},
 		Subject: pkix.Name{
 			CommonName:   host,
 			Organization: []string{"HashiCorp"},

diff --git a/server.go b/server.go
@@ -319,6 +319,8 @@ func Serve(opts *ServeConfig) {
 			ClientAuth:   tls.RequireAndVerifyClientCert,
 			ClientCAs:    clientCertPool,
 			MinVersion:   tls.VersionTLS12,
+			RootCAs:      clientCertPool,
+			ServerName:   "localhost",
 		}
 
 		// We send back the raw leaf cert data for the client rather than the