ClientCertificateConfig

atoti.ClientCertificateConfig(
    *,
    trust_store: Path,
    trust_store_password: str | None,
    username_regex: str = 'CN=(.*?)(?:,|$)',
)

The JKS truststore config to enable client certificate authentication (also called mutual TLS or mTLS) on the application.

​

Attributes

​

trust_store

Path to the truststore file generated with the certificate used to sign client certificates.

​

trust_store_password

Password protecting the truststore.

​

username_regex

Regex to extract the username from the certificate.