Port basecamp/kamal-proxy#204 (open PR). Enables Cloudflare Authenticated Origin Pulls.
Demand: basecamp/kamal#1628 (7 comments/6 reactions), #1484.
Where: tls.Config.ClientCAs/ClientAuth on the HTTPS listener (server.go:158).
Pairs with: gem-side plumbing.
Verify: connection without a client cert is rejected when required; make test.
Port basecamp/kamal-proxy#204 (open PR). Enables Cloudflare Authenticated Origin Pulls.
Demand: basecamp/kamal#1628 (7 comments/6 reactions), #1484.
Where:
tls.Config.ClientCAs/ClientAuthon the HTTPS listener (server.go:158).Pairs with: gem-side plumbing.
Verify: connection without a client cert is rejected when required;
make test.