mtls mode#2876

Open

constantine2nd wants to merge 21 commits into

OpenBankProject:developfrom

constantine2nd:feature/http4s-mtls-dev-toggle

Commits on Jul 23, 2026

style(psd2): tidy the leftovers of the certificate Box conversion
constantine2nd
committed
docs(mtls): design proposal for terminating mTLS in production
constantine2nd
committed
docs(mtls): add the implementation plan to the topologies proposal
constantine2nd
committed
feat(mtls): canonicalise PSD2-CERT on ingress
constantine2nd
committed
docs(mtls): record the four design decisions
constantine2nd
committed
feat(mtls): identify the caller by asking whether the TLS peer is a forwarder
constantine2nd
committed
fix(mtls): drop '(dev-only)' from the boot log
constantine2nd
committed
docs(mtls): the checked-in dev certificates are enough to test with
constantine2nd
committed
test(mtls): a development certificate set named for the roles it plays
constantine2nd
committed
test(mtls): keep the dev CA key so the counterpart app can sign against it
constantine2nd
committed
fix(mtls): stop the run scripts calling mTLS dev-only
constantine2nd
committed

Commits on Jul 24, 2026