4 ms·
I wonder why LE certs specify TLS Client EKU.
by pritambaral 8y ago
I wonder why LE certs specify TLS Client EKU.
- zimmerfrei 8y agoThat enables mutually-authenticated TLS connections between servers.
- aaronmdjones 8y agoAs zimmerfrei said, it allows one webserver to connect to another (e.g. a load balancer, with a certificate, to connect to a backend webserver) and present that cert to the server it is connecting to. Without the client EKU bit, a conforming TLS implementation would reject the connection.