mtls mode - #2876

Merged

simonredfern merged 22 commits into

OpenBankProject:developfrom

constantine2nd:feature/http4s-mtls-dev-toggle

Jul 28, 2026

Commits on Jul 23, 2026

style(psd2): tidy the leftovers of the certificate Box conversion
constantine2nd
committed
docs(mtls): design proposal for terminating mTLS in production
constantine2nd
committed
docs(mtls): add the implementation plan to the topologies proposal
constantine2nd
committed
feat(mtls): canonicalise PSD2-CERT on ingress
constantine2nd
committed
docs(mtls): record the four design decisions
constantine2nd
committed
feat(mtls): identify the caller by asking whether the TLS peer is a forwarder
constantine2nd
committed
fix(mtls): drop '(dev-only)' from the boot log
constantine2nd
committed
docs(mtls): the checked-in dev certificates are enough to test with
constantine2nd
committed
test(mtls): a development certificate set named for the roles it plays
constantine2nd
committed
test(mtls): keep the dev CA key so the counterpart app can sign against it
constantine2nd
committed
fix(mtls): stop the run scripts calling mTLS dev-only
constantine2nd
committed

Commits on Jul 24, 2026

Commits on Jul 28, 2026

chore: untrack scripts/__pycache__, ignore compiled Python
constantine2nd
committed