2 commits

Author	SHA1	Message	Date
Yedaya Katsman	2cf19c245e	tests: test mtls also w/ clientAuth EKU only ... The google chrome root program will stop allowing roots that have both clientAuth and ServerAuth [1]. In one of the mtls tests, use a certificate with only the clientAuth EKU. [1] https://googlechrome.github.io/chromerootprogram/#322-pki-hierarchies-included-in-the-chrome-root-store Closes #17493	2025-05-31 15:20:25 +02:00
Yedaya Katsman	8988f33f62	tests: Add https-mtls server to force client auth ... - test2088 verifies that mutual tls works This adds a new certificate to generate which has the clientAuth key usage enabled, and uses it to connect to a https-mtls server. Closes #16923	2025-04-07 08:46:56 +02:00