0

I understand that X.509 certificates are used for authentication.

How can I use the information provided in an X.509 certificate for authorization? For example, are there any fields in the certificate that can be checked by the server to determine whether that user can access a resource once authenticated?

Thanks

Improve this question
2
  • 1
    Yes, the CA can encode whatever in the client certificate and the server can parse the certificate to extract permissions. But be careful! news.ycombinator.com/item?id=25382544
    – Z.T.
    Feb 8, 2021 at 21:45
  • Thanks @Z.T. but which field would be used to encode that info?
    – Dr. Lecter
    Feb 8, 2021 at 22:59

0

Reset to default

Browse other questions tagged .