Skip to content
|
Plugin Hub
github-edit-pageEdit this page
report-issueReport an issue
header icon

Mutual TLS Authentication Changelog

By Kong Inc.
You are browsing unreleased documentation.

Changelog

Kong Gateway 3.7.x

  • Added the default_consumer option, which lets you use a default consumer when the client certificate is valid but doesn’t match any existing consumers.

Kong Gateway 3.5.x

  • Fixed an issue to prevent caching network failures during revocation checks.

Kong Gateway 3.4.x

  • Fixed several revocation verification issues:
    • If revocation_check_mode=IGNORE_CA_ERROR, then the CRL revocation failure will be ignored.
    • Once a CRL is added into the store, it will always do CRL revocation check with this CRL file.
    • OCSP verification failed with no issuer certificate in chain error if the client only sent a leaf certificate.
    • http_timeout wasn’t correctly set.
  • Optimized CRL revocation verification.
  • Fixed a bug that would cause an unexpected error when skip_consumer_lookup is enabled and authenticated_group_by is set to null.

Kong Gateway 3.0.x

  • The deprecated X-Credential-Username header has been removed.

Kong Gateway 2.8.1.1

  • Introduced certificate revocation list (CRL) and OCSP server support with the following parameters: http_proxy_host, http_proxy_port, https_proxy_host, and https_proxy_port.