MTLS on Shubham Singh https://1shubham7.blog/tags/mtls/ Recent content in MTLS on Shubham Singh Hugo -- gohugo.io en-us Authenticating Servers with Their Existing Certificates via Traefik mTLS https://1shubham7.blog/traefik-mtls-existing-certificates/ Mon, 01 Jan 0001 00:00:00 +0000 https://1shubham7.blog/traefik-mtls-existing-certificates/ Why the servers I manage authenticate to services in Kubernetes with the certificate their Puppet agent already holds: the Traefik TLSOption and CA Secret, RequireAndVerifyClientCert versus VerifyClientCertIfGiven, the passTLSClientCert header the app reads, and the seven months a stale CA bundle rejected every server without anyone noticing.