Project: mule
Issue MULE-8518: Provide access to client certificate on 2-way TLS authenticated connections
When a 2-way TLS authenticated connection is created the client certificate should be exposed in the flow since it may be useful to use it to identify the client. We are going to expose the client certificate ONLY (not the CA certificates) in the flow using a new inbound property http.client.cert. The user can access the client principal by doing message.inboundProperties['http.client.cert'].getSubjectDN() We analyse if there is any risk by exposing the certificate as an inbound property but we got to the conclusion that there's no risk since the client certificate is publicly available in general and it's not used for the communication encrypt / decrypt. It's only used to identify the client.
Story points: 5