Accept passphrase at client

[zillani]

Issue type:
Feature request

Description

We have set up linkerd with cert & key at client side to have mutual tls communication, the cert at client side has a passphrase. We need linkerd to accept this passphrase at config level or equivalent and process the request with the keys.

Config

      client:
        kind: io.l5d.static
        configs:
        - prefix: "/$/io.buoyant.rinet/9083/{service}"
          tls:
            commonName: "{service}.bar.com"
            clientAuth:
              certPath: /io.buoyant/linkerd/certs/my-certificate.pem
              keyPath: /io.buoyant/linkerd/certs/my-key.pem

Endpoint is like

curl -vk https://foo.bar.com:9083/xyz --cert mykeystore.pem:changeit

"changeit" is the passphrase

Thank you.

[wmorgan]

@adleong what do you think?

[adleong]

This sounds like a good idea. Pull requests welcome.