Interface MtlsConfig

Canonical mTLS configuration — PEM-string-based, backend-agnostic.

Shared by both RemoteGraphStore (Bolt) and RemoteRelationalStore (PG-wire). Each backend adapts to its native format:

interface MtlsConfig {
    ca?: string | string[];
    cert: string;
    key: string;
    passphrase?: string;
}

Properties

ca?: string | string[]

PEM-encoded CA certificate(s). Omit to use system trust store.

cert: string

PEM-encoded client certificate (for mTLS).

key: string

PEM-encoded client private key (for mTLS).

passphrase?: string

Private key passphrase.