[GUACAMOLE-1144] Option for guacd require client SSL certificate

• Type: New Feature
• Status: Closed
• Priority: Minor
• Resolution: Duplicate
• Affects Version/s: 1.2.0
• Component/s: guacd
• Assignee: Unassigned
• Reporter: Pat Riehecky
• Created: 21/Jul/20 18:46
• Updated: 21/Jul/20 19:02
• Resolved: 21/Jul/20 19:02

Description

Guacd is able to use SSL encryption to protect the traffic over real networks, however, as the documentation notes - guacd does no authentication.

 

This is a feature request to add support for guacd to require a client certificate signed by a specified CA.  Perhaps with some sort of DN matchers...

 

This would simplify instances where guacd is not located on the same system as tomcat by providing privacy and authentication of the remote client.  I'd expect it to be transparent to the web application users.

Issue Links

• duplicates: GUACAMOLE-28 Add support for TLS-PSK mutual authentication