Get username other than via proxy protocol

[Nicola Fricker]

Hi There

We are currently on a solution where we need to set the Username of a Client from his x509 certificate, so that we can set topics restrictions via acl patterns.
It works as intended over websockets with haproxy as ingress on kubernetes and enabling the proxy protocoll and the proxy_protocol_use_cn_as_username setting on vernemq.

However, we now must develop a solution, where we cannot use proxy protocoll for getting the CN.
Is there any other method of setting the CN as username, e.g. over a http header?
The connection doesnt necessarily needs to be over websocket.

Thank you and kind regards

[André Fatton]

Hi,

you can configure a TLS listener in VerneMQ and then add a setting like the following:

listener.ssl.my_ssl_listener.use_identity_as_username = on

I hope this helps,

André