feat: S03.09 mutual TLS — client cert + key for SL4 non-repudiation#184

Merged

DavidCozens merged 10 commits into

mainfrom

feat/mtls-client-identity

Apr 22, 2026

Commits on Apr 22, 2026

test: S03.09 assert no client-identity calls when mTLS config is null
DavidCozens
committed
feat: S03.09 load client cert chain, key, and check match when config set
DavidCozens
committed
feat: S03.09 reject partial mTLS config as a setup error
DavidCozens
committed
test: S03.09 drive mTLS failure and pointer-chain assertions
DavidCozens
committed
test: S03.09 extend harness to write key PEM and require client certs
DavidCozens
committed
test: S03.09 in-process mTLS integration scenarios against libssl
DavidCozens
committed
feat: S03.09 BDD end-to-end mTLS scenario against syslog-ng
DavidCozens
committed
docs: S03.09 promote mTLS to available in iec62443.md, DEVLOG entry
DavidCozens
committed
style: S03.09 appease clang-tidy and clang-format
DavidCozens
committed
chore: address CodeRabbit nits — E03 padding, comment accuracy, SSL_FILETYPE_PEM assertion

DavidCozens
and
claude
committed