code wiki / mtls
topic: mtls
10 modules sharing the mtls name family (derived from the tree's prefix discipline).
| module | description | lines | funcs |
|---|---|---|---|
| nx_mtls_authz.nx | bind a VERIFIED client-cert identity to an access decision. | 165 | 8 |
| nx_mtls_census.nx | the MEASURED scoreboard for the mTLS (CLIENT-CERTIFICATE) no-cookie session carrier. | 120 | 8 |
| nx_mtls_ecdsa.nx | ECDSA-P256 OPAQUE-bound client identity cert (the guaranteed-browser-interop branch). | 78 | 5 |
| nx_mtls_identity.nx | OPAQUE-bound client identity: derive the mTLS keypair + cert from export_key. | 164 | 8 |
| nx_mtls_issue.nx | R7 ISSUANCE: one call the login daemon makes to hand a browser its identity .p12. | 105 | 5 |
| nx_mtls_loopback_probe.nx | probe: does the mutual-auth loopback import set co-compile + the funcs interop? expect_exit: 0 license_tier: ORIGINAL | 32 | 1 |
| nx_mtls_pkcs12.nx | sovereign PKCS#12 (.p12 / PFX) emitter for one-time browser/OS import (RFC 7292). | 230 | 16 |
| nx_mtls_pkcs12_ecdsa.nx | ECDSA-P256 .p12 driver (the browser-interop-safe provisioning, rung R5c). | 64 | 6 |
| nx_mtls_serve_decision.nx | R7 ENFORCEMENT: turn an mTLS handshake result into a doc-serving decision. | 118 | 4 |
| nx_mtls_test_daemon.nx | the mTLS INTEROP test daemon: proves run_ecdsa_mtls completes a real TLS 1.3 | 110 | 4 |