yii2 extension for automatic login via TLS/SSL/HTTPS client certificates

Setup ¶

1. Configure Webserver ¶

apache ¶

<VirtualHost example.hammerle.me:443>
    # ...

    SSLEngine on
    SSLCertificateFile /etc/somewhere/example-server-cert.pem
    SSLCertificateKeyFile /etc/restricted/example-server-key.pem

    SSLVerifyClient optional
    SSLVerifyDepth 1
    SSLCACertificateFile /etc/somewhere/example-client-cert-ca.pem
    SSLOptions +StdEnvVars
</VirtualHost>

2. Install Extension ¶

composer require fphammerle/yii2-client-cert-auth

3. Create Table ¶

./yii migrate --migrationPath=./vendor/fphammerle/yii2-client-cert-auth/migrations

4. Enable Extension in Yii's Application Config ¶

$config = [
    // ...
    'bootstrap' => ['clientCertAuth'],
    'components' => [
        // ...
        'clientCertAuth' => \fphammerle\yii2\auth\clientcert\Authenticator::className(),
    ],
    // ...
];

5. Register Client Certificates ¶

$subj = new \fphammerle\yii2\auth\clientCert\Subject;
$subj->identity = \Yii::$app->user->identity;
$subj->distinguished_name = "CN=Fabian,C=AT";
$subj->save();