Skip to content

Conversation

@ryanfowler
Copy link
Owner

No description provided.

@ryanfowler ryanfowler requested a review from Copilot January 26, 2026 21:07
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR adds mutual TLS (mTLS) support to enable client certificate verification. When configured, the server will require clients to present valid certificates signed by a specified Certificate Authority (CA).

Changes:

  • Added mtlsCa configuration option across CLI, server interface, and main entry point
  • Implemented validation to ensure mTLS requires TLS to be enabled
  • Added comprehensive documentation for configuring and using mTLS

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated no comments.

File Description
lib/server.ts Added mtlsCa option to server interface and HTTPS configuration with client certificate validation settings
lib/cli.ts Added CLI option and validation for mTLS CA certificate file
index.ts Passed through mtlsCa option and enhanced logging to indicate TLS/mTLS status
docs/configuration.md Added documentation for the new --mtls-ca option and usage examples

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@ryanfowler ryanfowler merged commit 12b18f5 into main Jan 26, 2026
3 checks passed
@ryanfowler ryanfowler deleted the mtls branch January 26, 2026 21:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants