title: SSL Client Certificate with Puma
body: <p>Our Rails servers are behind AWS Gateway API. We intend to use its client ssl authentication so they are accessible only via the Gateway address. We want to throw out every request not coming from the AWS Gateway. But... for now our servers are running on Puma (not nginx).</p>
  
  <p>Is there way to start puma with ssl_client_certificate flag?</p>
  
  <p>Something like</p>
  
  <p><code>puma -b 'ssl://127.0.0.1:3000?key=server.key&amp;cert=server.crt'</code></p>
  
  <p>but for client certificate.</p>