Skip to content

Basic tls support and test framework - #2

Merged
dawid-nowak merged 6 commits into
mainfrom
dawid.nowak/basic_upstream_tls_support
May 7, 2026
Merged

Basic tls support and test framework#2
dawid-nowak merged 6 commits into
mainfrom
dawid.nowak/basic_upstream_tls_support

Conversation

@dawid-nowak

Copy link
Copy Markdown
Contributor

Enabling secure communication to downstream/upstream components with tls.
Enabling end to end unit/integration tests.

…quest client

Signed-off-by: Dawid Nowak <nowakd@gmail.com>
Signed-off-by: Dawid Nowak <nowakd@gmail.com>
Signed-off-by: Dawid Nowak <nowakd@gmail.com>
Signed-off-by: Dawid Nowak <nowakd@gmail.com>
@dawid-nowak
dawid-nowak requested a review from lucarlig May 7, 2026 08:28
@dawid-nowak
dawid-nowak force-pushed the dawid.nowak/basic_upstream_tls_support branch from 4de2fab to fc963a6 Compare May 7, 2026 09:46

@lucarlig lucarlig left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I found only minor stuff
general comments:

  1. Private keys are committed under assets/. Maybe move them into a clearly labeled test fixture folder so it is obvious they are not real deployment material.

  2. Tests only prove normal TLS works. They do not prove:

    • client cert/key loading works
    • missing cert/key fails correctly
    • a backend requiring a client cert accepts the gateway
    • a backend requiring a client cert rejects the gateway without one

Comment thread crates/contextforge-gateway-rs-lib/src/gateway/mcp_gateway.rs Outdated
Comment thread crates/contextforge-gateway-rs-lib/src/tests/gateway_end_to_end.rs
Signed-off-by: Dawid Nowak <nowakd@gmail.com>
@dawid-nowak
dawid-nowak force-pushed the dawid.nowak/basic_upstream_tls_support branch from fc963a6 to 403834f Compare May 7, 2026 10:23
@dawid-nowak
dawid-nowak requested a review from lucarlig May 7, 2026 10:25
@dawid-nowak
dawid-nowak merged commit 2b4a92c into main May 7, 2026
5 checks passed
@dawid-nowak
dawid-nowak deleted the dawid.nowak/basic_upstream_tls_support branch May 12, 2026 10:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants