How to do Mutual Authentication API (mTLS) with RemObjects

[Anderson_Gregorio]

Hi,

We’d like to know how could we implement an mTLS API using RemObjects.

We’ve found this topic from 2013:

How to do Mutual Authentication with SSL certificates in .NET?

Hi, Could you please give an example of how to validate client certificates on the server with RemObjects SDK for .NET? I need to be able to do custom validation of the certificate to only allow certain clients whose public certificates I have. I added an event handler for my IpHttpServerChannel’s HttpServer.SslOptions.ValidateRemoteCertificate, but the Certificate property in the event args is always null when a certificate is set up on the client. Thanks

Is there new updates of this subject?

PS: We’d like implement rather Delphi than .Net, but we accept suggestions.

Thank you

[EvgenyK (Evgeny Karpov)]

Hi,

pls read Setup & verify mutual TLS authentication (MTLS) with openssl | GoLinuxCloud article. It describes how to generate certificates with OpenSSL.

generated .pem files you can use with Indy channels.
You should assign them to properties of TIdServerIOHandlerSSLOpenSSL / TIdSSLIOHandlerSocketOpenSSL that should be linked with server/client Indy channels.

How to setup RO Indy server channel: SSL/TLS (Delphi)