Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feature request: Support client-side certificates #931

Open
johenning opened this issue Feb 24, 2019 · 0 comments
Open

Feature request: Support client-side certificates #931

johenning opened this issue Feb 24, 2019 · 0 comments

Comments

@johenning
Copy link

johenning commented Feb 24, 2019

Exposing an ampache/subsonic-server to the internet could be a incalculable security risk. Luckily webservers like nginx support authentication via client-side certificates before any request reaches a possibly insecure php-backend.
Android already supports client-side certificates and accessing such a server via chrome works out of the box. Any client-side certificate stored in the credential storage of Android can be used inside chrome to access a server that requires client-side authentification (ssl_verify_client on;).

It would be great if DSub could also use the credential storage to access client-side certificates when necessary. Currently no connection can be established, as if the server was not available at all.

(Possibly related to #60)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant