Reverse proxy: do Client TLS before Server TLS

[oliverrahner]

Hi,

I want to select the client certificate for the server connection based on the client certificate of the client connection.
I did already manage to retrieve information about the client certificate of the client connection, but because the default layer stack for reverse proxy mode does server TLS first, I don't have this information available at the time of server TLS initialization...

I tried fiddling around with the next_layer hook, but it is only called after the ServerTLSLayer has already been processed (tls_start_server is called before next_layer).

So is what I want to do even feasible or are there dependencies I didn't see that would prevent this from working?
Any hints on how to do what I'm looking for?

[mhils]

Have you tried setting connection_strategy to lazy? :)

…

On Thu, Jul 27, 2023, 16:23 Oliver Rahner ***@***.***> wrote: Hi, I want to select the client certificate for the server connection based on the client certificate of the client connection. I did already manage to retrieve information about the client certificate, but because the default layer stack for reverse proxy mode does server TLS first, I don't have this information available yet... I tried fiddling around with the next_layer hook, but it is only called after the ServerTLSLayer has already been processed (tls_start_server is called before next_layer). So is what I want to do even feasible or are there dependencies I didn't see that would prevent this from working? Any hints on how to do what I'm looking for? — Reply to this email directly, view it on GitHub <#6282>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAHY2PTS7SM63GYQM7MV743XSJ2WTANCNFSM6AAAAAA22FLJFY> . You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>

[oliverrahner]

🤦‍♂️
I had looked through the available options, but I must have missed that one... Will try if that suits my purpose :)

[oliverrahner]

That was way too easy :)
Thank you very much!