add cacert key cert to UI about fortio HOT 8 CLOSED

Hopefully 1.63.0 (upcoming/shortly) does what you need, please try/confirm

from fortio.

You need a different CA in same instance of fortio or would starting the server with a custom CA imply using it for api calls?

from fortio.

thanks for commenting! awesome project! I think starting the server with custom cacert/certs/keys to be used for api calls would suffice. I'm assuming this is what's happening when I run the cli with the flags from the server with mounted files. Maybe there's a way to do this now, but anytime is set the flags on start of the server I can't connect

from fortio.

Thanks for the clarification, I thought I had an issue already that some command line flags don't apply to UI/rapi issued runs, so that should be doable or maybe both

from fortio.

Btw are you using the UI form or the rapi/ endpoints?

Note that for both there is https-insecure=on already today, but you're trying to do mTLS?

from fortio.

So I think it's reasonable to have api defaults be from cmdline flags and I think that'd solve it

from fortio.

Well one problem is today there is only 1 -cert and -key and it applies contextually to fortio server or client depending in the command. So if you do set server -cert ... for instance the UI will start as https server serving that cert

So not sure if after that using the same cert for mtls is... ok?

from fortio.

@ldemailly so does this change mean when starting the fortio server -cert -key -cacert I'll be able to navigate to UI.. and the certs only applied to the curl i'm load testing?

from fortio.