Verifiable Health Link
0.0.2-current - ci-build International flag

Verifiable Health Link, published by IHE IT Infrastructure Technical Committee. This guide is not an authorized publication; it is the continuous build for version 0.0.2-current built by the FHIR (HL7® FHIR® Standard) CI Build. This version is based on the current content of https://github.com/IHE/ITI.VHL/ and changes regularly. See the Directory of published versions

Requirements: Accept mTLS

Official URL: https://profiles.ihe.net/ITI/VHL/Requirements/AcceptMTLSConnection Version: 0.0.2-current
Active as of 2025-09-19 Computable Name: AcceptMTLSConnection

The VHL Sharer, when acting as a server in a Verified Health Link (VHL) transaction, SHALL accept a mutually authenticated TLS (mTLS) connection initiated by a VHL Receiver.

During the TLS handshake, the Sharer SHALL:

  • Present a valid X.509 server certificate that is anchored to a recognized Trust Anchor
  • Validate the client certificate presented by the Receiver against the same trust framework
  • Establish a secure channel over which all subsequent VHL-related transactions are conducted

Successful completion of the mTLS handshake is a prerequisite for all VHL operations involving sensitive data exchange. This requirement refines the bilateral obligations described in Create Trusted Channel.

Publisher IHE IT Infrastructure Technical Committee
Contact Email No contact email has been registered.
Jurisdiction
Statements
Derived from
Derivatives This requirement has the following derivatives:
Participating Actors