jkbbwr
Cannot manage to get MTLS working with elixir
I am able to do MTLS connections to a given service using curl and httpie. That works fine.
An example of a working httpie command http post --cert=./cert.pem --cert-key=./cert.key <url>
The key is passphrase protected, but I have tried using an unprotected one in Req/elixir and no dice.
But as soon as I try to replicate that in elixir using Req I get errors from the service saying that there is no client certificate being used.
I have tried using certfile and keyfile and password but nothing seems to work and there is remarkably no documentation about this.
I could swear I had it working before but I cannot for the life of me get it working now.
I appreciate this will be reasonably tricky to identify as I cannot obviously share the keys. But I would love any help, I am going slowly insane.
Marked As Solved
adw632
Req uses Finch as its default adapter and Finch uses Mint (which allows all of the Erlang :gen_tcp and :ssl socket options to be passed).
So looking at the Req run_finch/1 documentation we see :connect_options which contains :transport_opts which defers to Mint for the details.
The mutual TLS options for Mint was answered here as not all options are covered in the Mint documentation, only the ones they alter the semantics of.
So your code will be something like:
Req.post!(url, json: payload, connect_options: [transport_opts: [cacerts: :public_key.cacerts_get(), certfile: ~c"client.pem", password: secret_charlist]])
Note that Erlang needs charlists passed.
Popular in Questions
Other popular topics
Latest on Elixir Forum
Sponsor Spotlight
Producing high quality Elixir screencasts since 2017.
Categories:
Sub Categories:
Forums
Our Sponsors
Build Elixir applications with speed and confidence.
Supporting innovation across the BEAM ecosystem.
We build reliable cloud platforms for business-critical systems.
Catch errors, track performance, monitor hosts and more.
Practical resources that improve the lives of professional developers.
Enabling companies to succeed by building software people love.
The deployment platform built for Elixir: PaaS ease, VPS control.
Courses that'll move you from confusion to "Aha, now I get it!"