Differences

This shows you the differences between two versions of the page.

--- software:tls:mtls [2025/07/23 01:09] – rodolico
+++ software:tls:mtls [2025/07/23 02:10] (current) – rodolico
@@ Line 1: / Line 1: @@
 ====== How mTLS Works ======
+TLS, in its normal form, is good for identifying the server you are connecting to. However, in some cases, the server also needs to be able to identify the user or machine that is talking to it. For this, we use Mutual TLS, aka mTLS. This is also known as a Client Certificate in some cases, and is used extensively in Virtual Private Networks (VPN's), amongst other things. For example, one option for creating an [[https://en.wikipedia.org/wiki/OpenVPN|OpenVPN]] connection with the [[https://opnsense.org/|opnSense]] router firmware is to set up a Client Certificate.
+With mTLS, two certificates are created; one for the server, and one for the user (or machine). See [[software:tls:mtlsgen|]] for instructions on how to create an internal mTLS pair.
 The control flow for mutual TLS (mTLS) communication involves several key steps that ensure both the client and server authenticate each other before establishing a secure connection. Here’s a structured overview of the mTLS communication process: