X.509 authentication

I need to implement X.509 authentication with Kong.
Writing a new plugin is the only available solution? I will appreciate some advice