mTLS support in Dgraph

Hi All,

Doers Dgraph support mTLS auth for the user ? If yes, can someone please provide any reference ?

Thanks,
Shyam

Hi,

It is indeed possible to use mTLS for client authentication. This applies to the Live Loader and official clients (gRPC) as well as other HTTP-based clients.

Check the sections titled “Using TLS with internal and external ports encrypted” and “Client Authentication Options” in the link below, but in a nutshell, you need to generate a separate client certificate and key, per client, and use that to connect to the Dgraph Alpha nodes where mTLS is required.

The doc also includes useful examples for getting setup with client mTLS for a variety of agents such as curl, official gRPC clients, Ratel etc.

HTH!