code wiki / _hdl_build / nx_apistack_mtls.nx

nx_apistack_mtls.nx

buildroot/runtime/_hdl_build/nx_apistack_mtls.nx

1519 B29 linesdepth 3pulls 3 transitivereach 1 importersview sourcekind librarytopic apistack
docsdependenciesstructsconstsfunctions

about

nx_apistack_mtls.nx -- CAP-API-MTLS: mutual-TLS client authentication for /api via certificate-fingerprint PINNING. A presented client cert's fingerprint is allowed only if it's in the pinned allowlist (mtls_pins.conf, one hex fingerprint per line); deny-by-default. Sovereign pinning as DATA (add a peer = a row) -- no CA-chain trust-anyone, the sovereign exceed over permissive mTLS. license_tier: ORIGINAL

dependencies 2 imports · 1 importers

nx_syscalls.nx nx_site_lock_lib.nx nx_apistack_mtls.nx nx_apistack_mtls_gate.nx

imports: nx_syscalls.nxnx_site_lock_lib.nx

imported by: nx_apistack_mtls_gate.nx

structs

none

consts

7const K_MAGIC_65536: i64 = 65536

functions

9func mt_read_file(path: *u8, out: *u8, cap: i64) -> i64
called by 1: mt_pinned calls 3: sys_openat_rdsys_readsys_close
16func mt_pinned(conf_path: *u8, fp: *u8, fp_n: i64) -> i64
called by 1: main calls 5: sys_mmapmt_read_fileslk_line_endslk_eqslk_at