Allow using serverAuth certificates for mutual TLS (mTLS) authentication in server-to-server usages
Good day/year to all,
As the title(*) suggests, I am seeking guidance from Oracle regarding their SBCs' support for mTLS. This is in light of the upcoming deadline in May/June 2026, after which new certificates will no longer include the clientAuth EKU.
Some other SBC vendors have announced plans to support mTLS using the ServerAuth EKU, so I hope Oracle will also have a solution to maintain mTLS functionality without disabling it in the coming months.
(*): The title refers to the now-expired draft RFC:
Thanks,
Bao