Summary: | Add PKI/x509/client SSL authentication to REST API | ||
---|---|---|---|
Product: | Koha | Reporter: | David Cook <dcook> |
Component: | REST API | Assignee: | Bugs List <koha-bugs> |
Status: | RESOLVED WISHLIST | QA Contact: | |
Severity: | enhancement | ||
Priority: | P5 - low | ||
Version: | unspecified | ||
Hardware: | All | ||
OS: | All | ||
GIT URL: | Change sponsored?: | --- | |
Patch complexity: | --- | Documentation contact: | |
Documentation submission: | Text to go in the release notes: | ||
Version(s) released in: | Circulation function: |
Description
David Cook
2020-06-18 03:10:49 UTC
"OAuth 2.0 Mutual-TLS Client Authentication and Certificate-Bound Access Tokens" at https://tools.ietf.org/html/rfc8705 could be interesting... although it still has the per-implementation issue of certificate revocation management... I was looking at FreeIPA (https://en.wikipedia.org/wiki/FreeIPA) and it got me on to DogTag (https://www.dogtagpki.org/wiki/PKI_Main_Page), which is an open source certificate authority that also supports OCSP for checking Certificate Revocation Lists. |