diff --git a/irma/cmd/keyshare-myirma.go b/irma/cmd/keyshare-myirma.go index 39f53552..2029ee45 100644 --- a/irma/cmd/keyshare-myirma.go +++ b/irma/cmd/keyshare-myirma.go @@ -75,6 +75,8 @@ func init() { flags.Int("redis-db", 0, "database to be selected after connecting to the server (default 0)") flags.String("redis-tls-cert", "", "use Redis TLS with specific certificate or certificate authority") flags.String("redis-tls-cert-file", "", "use Redis TLS path to specific certificate or certificate authority") + flags.String("redis-tls-client-key-file", "", "use Redis mTLS with specified client key path") + flags.String("redis-tls-client-cert-file", "", "use Redis mTLS with specified client certificate path") flags.Bool("redis-no-tls", false, "disable Redis TLS (by default, Redis TLS is enabled with the system certificate pool)") headers["keyshare-attributes"] = "IRMA session configuration" diff --git a/irma/cmd/keyshare-server.go b/irma/cmd/keyshare-server.go index b87f3faa..4224b1dd 100644 --- a/irma/cmd/keyshare-server.go +++ b/irma/cmd/keyshare-server.go @@ -72,6 +72,8 @@ func init() { flags.Int("redis-db", 0, "database to be selected after connecting to the server (default 0)") flags.String("redis-tls-cert", "", "use Redis TLS with specific certificate or certificate authority") flags.String("redis-tls-cert-file", "", "use Redis TLS path to specific certificate or certificate authority") + flags.String("redis-tls-client-key-file", "", "use Redis mTLS with specified client path") + flags.String("redis-tls-client-cert-file", "", "use Redis mTLS with specified client certificate path") flags.Bool("redis-no-tls", false, "disable Redis TLS (by default, Redis TLS is enabled with the system certificate pool)") headers["jwt-privkey"] = "Cryptographic keys" diff --git a/irma/cmd/server.go b/irma/cmd/server.go index 3a3e01f9..97ca3b14 100644 --- a/irma/cmd/server.go +++ b/irma/cmd/server.go @@ -136,6 +136,8 @@ func setFlags(cmd *cobra.Command, production bool) error { flags.Int("redis-db", 0, "database to be selected after connecting to the server (default 0)") flags.String("redis-tls-cert", "", "use Redis TLS with specific certificate or certificate authority") flags.String("redis-tls-cert-file", "", "use Redis TLS path to specific certificate or certificate authority") + flags.String("redis-tls-client-key-file", "", "use Redis mTLS with specified client key path") + flags.String("redis-tls-client-cert-file", "", "use Redis mTLS with specified client certificate path") flags.Bool("redis-no-tls", false, "disable Redis TLS (by default, Redis TLS is enabled with the system certificate pool)") headers["jwt-issuer"] = "JWT configuration"