Issue with Vault Logon

[PureOxygen-Dev]

Hi Dave

Appears that Our OpenBao wants a client cert and rustguac is not playing nice as it does not have one

2026-03-09T16:53:39.191706Z DEBUG rustls::client::common: Client auth requested but no cert/sigscheme available

Any ideas?

Simon

[davekempe]

Hi Simon,

This is fixed in v0.6.1. You can now configure mTLS client certificates for Vault/OpenBao in config.toml:

[vault]
addr = "https://openbao.example.com:8200"
role_id = "..."
ca_cert = "/opt/rustguac/certs/ca.pem"           # custom CA (if private/self-signed)
client_cert = "/opt/rustguac/certs/client.pem"    # client certificate for mTLS
client_key = "/opt/rustguac/certs/client-key.pem" # client private key

All three are optional — set whichever combination your setup needs:

• ca_cert only → custom CA, no client cert
• client_cert + client_key → mTLS with system CA trust
• All three → mTLS with a private CA

Make sure the cert files are readable by the rustguac user and the private key has restrictive permissions (chmod 600).

Release: https://github.com/sol1/rustguac/releases/tag/v0.6.1