{"action":"created","issue":{"url":"https://api.github.com/repos/cloudfoundry/gorouter/issues/167","repository_url":"https://api.github.com/repos/cloudfoundry/gorouter","labels_url":"https://api.github.com/repos/cloudfoundry/gorouter/issues/167/labels{/name}","comments_url":"https://api.github.com/repos/cloudfoundry/gorouter/issues/167/comments","events_url":"https://api.github.com/repos/cloudfoundry/gorouter/issues/167/events","html_url":"https://github.com/cloudfoundry/gorouter/issues/167","id":212985420,"number":167,"title":"Pass client cert information through to backend","user":{"login":"sorenh","id":160090,"avatar_url":"https://avatars0.githubusercontent.com/u/160090?v=3","gravatar_id":"","url":"https://api.github.com/users/sorenh","html_url":"https://github.com/sorenh","followers_url":"https://api.github.com/users/sorenh/followers","following_url":"https://api.github.com/users/sorenh/following{/other_user}","gists_url":"https://api.github.com/users/sorenh/gists{/gist_id}","starred_url":"https://api.github.com/users/sorenh/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sorenh/subscriptions","organizations_url":"https://api.github.com/users/sorenh/orgs","repos_url":"https://api.github.com/users/sorenh/repos","events_url":"https://api.github.com/users/sorenh/events{/privacy}","received_events_url":"https://api.github.com/users/sorenh/received_events","type":"User","site_admin":false},"labels":[{"id":240265044,"url":"https://api.github.com/repos/cloudfoundry/gorouter/labels/unscheduled","name":"unscheduled","color":"D9D9D9","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2017-03-09T09:50:58Z","updated_at":"2017-03-09T21:04:17Z","closed_at":null,"body":"If a requestor provides a client certificate and the gorouter terminates SSL for me, I at least need access to the client cert's DN. I could make do with the full certificate, but just the client DN would make things quite a bit easier."},"comment":{"url":"https://api.github.com/repos/cloudfoundry/gorouter/issues/comments/285482342","html_url":"https://github.com/cloudfoundry/gorouter/issues/167#issuecomment-285482342","issue_url":"https://api.github.com/repos/cloudfoundry/gorouter/issues/167","id":285482342,"user":{"login":"shashwathi","id":9938926,"avatar_url":"https://avatars3.githubusercontent.com/u/9938926?v=3","gravatar_id":"","url":"https://api.github.com/users/shashwathi","html_url":"https://github.com/shashwathi","followers_url":"https://api.github.com/users/shashwathi/followers","following_url":"https://api.github.com/users/shashwathi/following{/other_user}","gists_url":"https://api.github.com/users/shashwathi/gists{/gist_id}","starred_url":"https://api.github.com/users/shashwathi/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/shashwathi/subscriptions","organizations_url":"https://api.github.com/users/shashwathi/orgs","repos_url":"https://api.github.com/users/shashwathi/repos","events_url":"https://api.github.com/users/shashwathi/events{/privacy}","received_events_url":"https://api.github.com/users/shashwathi/received_events","type":"User","site_admin":false},"created_at":"2017-03-09T21:04:17Z","updated_at":"2017-03-09T21:04:17Z","body":"@sorenh : Thank you for reporting this issue. After looking at [Apache docs](https://httpd.apache.org/docs/current/mod/mod_ssl.html), there are some standard headers used to pass SSL information through to backend.\r\n  \r\nWe could consider using the header `SSL_CLIENT_S_DN` / `SSL_CLIENT_I_DN ` for your case which corresponds to subject DN / issuer's DN in client's certificate. Upon reading further about subject DN and issuer DN, it feels like you need issuer DN but correct me if I am wrong.\r\n\r\n@shalako @abbyachau \r\nWe can also take this opportunity to pass in minimal SSL headers to backend request like full client cert, algorithm used to verify the cert. \r\n\r\nRegards\r\nShash"}}
{"actor":{"display_login":"shashwathi"}}