Checked many blogs for 2 way ssl(Mutual Authentication) for magento api’s or PHP but did not get end to end implementation details.
Below is my understanding.
Lets consider client (sslclient.com) and server (sslserver.com), both will communicate after verifying ssl certificate.
The client will verify server certificate and server will verify the client certificate.
As I checked changes required in apache config and php curl.
**Below are the blogs which I have visited, **
- https://dzone.com/articles/implementing-one-way-and-two-way-ssl-mutual-authen
- https://medium.com/@kasunpdh/ssl-handshake-explained-4dabb87cdce
- https://www.scriptjunkie.us/2013/11/adding-easy-ssl-client-authentication-to-any-webapp/
- https://stackoverflow.com/questions/6586357/how-to-secure-a-restful-php-web-service-with-ssl-tls-and-or-message-level-securi
- https://stackoverflow.com/questions/30615007/php-soap-webservice-call-with-two-way-ssl-authentication
- https://linuxconfig.org/apache-web-server-ssl-authentication
- https://davegebler.com/post/php/mutual-tls-with-apache-and-php
If anyone knows end to end implementation, please share your input.
