How to enable mutual TLS (client ceritificate authentication) using oggca.sh inside a container?

[jsrober]

Hi,

I need to change each of tehe services (adminsrvr distsrvr pmsrvr recvsrvr) to use TLS and to require a client-certificate for authentication instead of username/password.

I see the documentation mentions running oggca.sh to accomplish this, but I don't think we can run this GUI app inside the container.

I suspect the solution is to use the REST API to enable mutual TLS and client-certificate authentication. I can't figure out how to do this.

Which endpoint(s) do I use and what do I POST/PUT/PATCH to enable client-cert authentication?

John