Client-certificate gateway (mTLS) with login audit reports

Replaced an old sign-in check with client-certificate (mTLS) verification, with login statistics and audit reports.

Track
Security
Status
In use
Period
2026-04 – present
AI
Developed with AI agents

My scope

Design, build and deployment.

Approach

  • nginx verifies client certificates; logins are recorded and shown in a web report.

Verification

In production use.

Results

MetricValueSourceEvidence
My commits116Git historySystem record
Related hours58 hTimesheetsSystem record
Logged hours split: me / AI executionme ≈14 h, AI execution ≈44 hOwn estimate; hours since 2025-02-22 split by the period’s ratio; company-logged hours onlyOwn estimate

Limits and next steps

Internal system; screens are not shown.

Tools

  • nginx
  • mTLS
  • Go