TlsClientAuthOptions Class

RFC 8705 metadata for tls_client_auth method. Defines match rules for Subject DN and/or Subject Alternative Name entries.

public record TlsClientAuthOptions : System.IEquatable<Abblix.Oidc.Server.Features.ClientInformation.TlsClientAuthOptions>

Inheritance System.Object → TlsClientAuthOptions

Implements System.IEquatable<TlsClientAuthOptions>

Properties

TlsClientAuthOptions.SanDns Property

Required DNS SAN entries.

public string[]? SanDns { get; init; }

Property Value

System.String[]

TlsClientAuthOptions.SanEmails Property

Required email SAN entries (RFC822Name).

public string[]? SanEmails { get; init; }

Property Value

System.String[]

TlsClientAuthOptions.SanIps Property

Required IP SAN entries (string representation).

public string[]? SanIps { get; init; }

Property Value

System.String[]

TlsClientAuthOptions.SanUris Property

Required URI SAN entries.

public System.Uri[]? SanUris { get; init; }

Property Value

System.Uri[]

TlsClientAuthOptions.SubjectDn Property

Exact Subject Distinguished Name (RFC 4514) that must be present on client cert.

public string? SubjectDn { get; init; }

Property Value

System.String