Andrew Martinez c4b89e9d01 fixes #2904 limit client certs requested/allowed (#2974) ...

* fixes #2904 limit client certs requested/allowed

Some clients (browsers) show a popup when interacting with our TLS
servers and a pop-up or other UI to select certificates for
interacting with our server. If not limited, this causes any client cert
available to be shown, allowing the user to choose a certificate
that will never work. This fix limits the issuer's allowed so the popup
never appears or only appears with viable options.

- use new xweb to modify server TLS configs with static and 3rd party
  CAs
- centralize CA certificates for re-use

2025-04-11 14:33:21 -04:00

..

controller.go

fixes #2904 limit client certs requested/allowed (#2974)

2025-04-11 14:33:21 -04:00