mirror of
https://github.com/sol1/rustguac.git
synced 2026-09-10 09:35:45 +00:00
df402944f3
- Rewrite Vault mTLS client to build rustls ClientConfig directly, bypassing reqwest::Identity::from_pem() which fails with rustls backend for PKCS#8 keys from OpenBao/Vault PKI - Make cert_path/key_path optional in [tls] — guacd TLS now works independently of server HTTPS (for reverse proxy setups) - Add webpki-roots direct dependency for custom TLS config - Add mTLS tests: PKCS#8 key, fullchain cert, tls_skip_verify - Update docs: configuration.md, security.md Closes #51, closes #49 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>