Simple definition
mTLS is a concept or mechanism used in pki. & certificates to authenticate both the server and the client with certificates.
Technical definition
In a business environment, mTLS mainly intervenes to authenticate both the server and the client with certificates. Its implementation depends on the architecture, equipment and security policies in place.
What’s the point?.
authenticate both the server and the client with certificates.
Concrete example
an API requires a client certificate in addition to the server certificate.
Common problems
- CA client not recognized.
- certificate expired
- Invalid SAN/EKU.
To be noted: Always adapt the diagnosis to the version of the product and to the architecture actually deployed.