Skip to content

Commit 6da5715

Browse files
committed
double auth procy marked obsolete
1 parent 701fceb commit 6da5715

2 files changed

Lines changed: 6 additions & 3 deletions

File tree

docs/trusted-build-systems/double-authentication-proxy.md

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -6,6 +6,11 @@ show_toc: 3
66
description: Double Authentication Proxy
77
---
88

9+
{:.panel.warning}
10+
> **Obsolete**
11+
>
12+
> The Double Authentication Proxy connector is scheduled for retirement. Please let us know if you need it for any scenarios currently not covered by other connectors.
13+
914
The Double Authentication Proxy is a connector that will let you use mutual TLS (TLS/SSL client certificates) for build node authentication.
1015

1116
This results in a two-fold authentication strategy:

docs/trusted-build-systems/index.md

Lines changed: 1 addition & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -62,6 +62,4 @@ Possible policies include:
6262
* Prevent root access: allow code signing only from build agents that don't allow any build scripts to modify systems settings
6363
* Prevent network access: guarantee that artifacts cannot be arbitrarily received from internet sources
6464
* Restrict user access: don't let development teams connect to the build agent, with or without administrative permissions (if you need build nodes with wider permission sets, consider separating the process of compilation and packaging from other steps such as running tests)
65-
* Require current security policies: avoid misuse of recently restored or otherwise not up-to-date build agents
66-
67-
See the [Double Authentication Proxy](/trusted-build-systems/double-authentication-proxy) for a simple way to achieve this using machine certificate enrollment.
65+
* Require current security policies: avoid misuse of recently restored or otherwise not up-to-date build agents

0 commit comments

Comments
 (0)