Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/02/24 8:22 p.m.11 views

Caddy: mTLS client authentication silently fails open when CA certificate file is missing or malformed

Summary Two swallowed errors in ClientAuthentication.provision cause mTLS client certificate authentication to silently fail open when a CA certificate file is missing, unreadable, or malformed. The server starts without error but accepts any client certificate signed by any system-trusted CA,...

9.3CVSS5.5AI score0.00267EPSS
SaveExploits1References7Affected Software1
Rows per page
Query Builder