Skip to main content

ClientCertificateHeaderFormat

@webda/core


Type Alias: ClientCertificateHeaderFormat

ClientCertificateHeaderFormat = "traefik" | "pem-urlencoded" | "xfcc"

Defined in: packages/core/src/contexts/clientcertificate.ts:71

Format of a header carrying the client certificate forwarded by a proxy

  • traefik: url-encoded base64 DER without PEM armour, comma-separated chain (Traefik passTLSClientCert with pem: true); full PEM blocks are also accepted
  • pem-urlencoded: url-encoded PEM (nginx $ssl_client_escaped_cert)
  • xfcc: Envoy x-forwarded-client-cert, the Cert field of the last element (the one added by the closest proxy)