mtls-transmitter
mtls-transmitter is a simple reverse proxy that injects client certificate for mTLS communication. It creates a reverse proxy that injects client certificate to incomming http requests and routes them to the https endpoint.
Building the binary
$ go build -o mtls-transmitter ./cmd/transmitter
Running the binary
$ ./mtls-transmitter -cert=/path/to/cert.pem -key=/path/to/key.pem -url=desired.host.com [-port=8080] [-skip-ssl]
Parameters
Parameters can also be set as flags or as environment variables, with flags attempting to take precedence.
| Flag | Env Var | Description |
|---|---|---|
-cert |
CERT |
The path to the client certificate; required |
-key |
KEY |
The path to the client certificate key; required |
-url |
URL |
The hostname:port to which the proxy fowards requests; required |
-port |
PORT |
The port on which the proxy listens on; default: 8080 |
-skip-ssl |
SKIP_SSL |
If set to true, the proxy sill skip server certificate verification; default: false |
-silent |
SILENT |
If set to true, the proxy will not log proxied events; default: false |
Running inside the docker container
Building
$ docker build -t crabtree/mtls-transmitter .
Running
NOTE: To run mtls-transmitter inside the docker container you need to provide your client certificate to your container.
$ docker run --rm -v /path/to/cert-dir:/cert -p 8080:8080 crabtree/mtls-transmitter -cert /cert/cert.pem -key /cert/key.pem -url desired.host.com
Development
Use the following:
make # to format and validate changes
make build # to build the binary
See the Makefile for additional options.