Skip to content

Security, audit, and quality

Covers auditability, auth, troubleshooting, test strategy, and quality control.

mTLS certificate header handling

  • TLS termination proxies must forward headers in this order: X-Forwarded-Client-Cert -> X-SSL-Client-Cert -> X-Client-Cert.
  • Include verification status headers: X-SSL-Client-Verify or X-Client-Verify.
  • Related env vars: EVOSPIKENET_MTLS_REQUIRED, EVOSPIKENET_ALLOWED_CERTS, EVOSPIKENET_ALLOWED_CERT_FINGERPRINTS.

See Environment variable policy for details.

Complete page list