Forwarding Client Certificates and Keys into mediators

Architecture & Standards
,
1

I have a mediator that validates clients using signed certificates, is there a way that openHIM can be configured to forward client certificates and keys into the mediator?

Thank you.

Ally.

1 Like
2

Hi Ally,

I don’t believe this is possible. TLS works at the socket level to create a secured connection between two points. So it isn’t possible to then forward the certificate on to an upstream mediator. However, if I remember correctly the OpenHIM sets an HTTP header (something like X-Client-ID I think) with the client ID of the authorised client which you might be able to do what you need to in the mediator.

Cheers,
Ryan

1 Like
3

Thank you @ryan i will have a look at X-Client-ID to see if it can be of help.

Ally.

1 Like