Agent skill · security · wshobson
mtls-configuration
Configure mutual TLS (mTLS) for zero-trust service-to-service communication. Use when implementing zero-trust networking, certificate management, or securing internal service communication.
Why this skill is useful
Provides detailed domain-specific knowledge on mTLS configuration and management that the AI wouldn't reliably generate on its own.
What it needs
About 1k tokens when loaded. Last updated 2026-08-05. 38,570 stars on the source repository.
What this skill does
mTLS Configuration Comprehensive guide to implementing mutual TLS for zero-trust service mesh communication. When to Use This Skill Implementing zero-trust networking Securing service-to-service communication Certificate rotation and management Debugging TLS handshake issues Compliance requirements (PCI-DSS, HIPAA) Multi-cluster secure communication Core Concepts 1. mTLS Flow 2. Certificate Hierarchy Templates and detailed worked examples Full template library and detailed worked examples live in references/details.md. Read that file when you need the concrete templates. Best Practices Do's Start with PERMISSIVE - Migrate gradually to STRICT Monitor certificate expiry - Set up alerts Use short-lived certs - 24h or less for workloads Rotate CA periodically - Plan for CA rotation Log TLS errors - For debugging and audit Don'ts Don't disable mTLS - For convenience in production Don't ignore cert expiry - Automate rotation Don't use self-signed certs - Use proper CA hierarchy Don't skip verification - Verify the full chain
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills wshobson/mtls-configuration