Secure HTTP Communication with mTLS

This example demonstrates how to configure the HTTP provider within promptfoo to utilize TLS/SSL certificates for mutual TLS (mTLS) authentication. It enables secure, certificate-based communication between services.

Use this configuration when you need to establish a secure connection to an HTTP endpoint that requires mTLS authentication. This is common in enterprise environments or when integrating with sensitive APIs. Do NOT use this if your target HTTP endpoint does not require mTLS or if you are not managing TLS certificates.

Inputs include the necessary TLS/SSL certificate files (e.g., client certificate, client key, CA certificate) and the configuration for the HTTP provider within promptfoo. The output is a secure, authenticated connection to the target HTTP service, allowing promptfoo to send requests and receive responses.

This configuration is designed for use with promptfoo, an open-source tool for evaluating and testing LLM prompts. It directly integrates with promptfoo's HTTP provider functionality.

This is for developers and DevOps engineers who are using promptfoo to test LLM applications that interact with backend services requiring mTLS. It differs from standard HTTP configurations by adding the crucial layer of certificate-based authentication, ensuring only trusted clients can connect.