+
Skip to content

Added --gen-selfsigned-cert flag #425

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Apr 7, 2025

Conversation

qlrd
Copy link
Contributor

@qlrd qlrd commented Mar 25, 2025

Fix #423

What is the purpose of this pull request?

  • Bug fix
  • Documentation update
  • New feature
  • Test
  • Other:

Which crates are being modified?

  • floresta-chain
  • floresta-cli
  • floresta-common
  • floresta-compact-filters
  • floresta-electrum
  • floresta-watch-only
  • floresta-wire
  • floresta
  • florestad
  • Other: .

Description

This flag, when passed to florestad, will create a ssl folder in <data-dir> and <data-dir>/ssl/key.pem and a self-signed <data-dir>/ssl/cert.pem. This self-signed certificate can be a option to those users that do not have certificates with a trusted chain. It's import to note that the private-key isn't encrypted.

More specifically, this commit add:

  • a flag --gen-selfsigned-cert on CLI;

  • some enums elements on error.rs

  • a generate_selfsigned_certificate on florestad.rs;

  • a new step on florestad::start method before creating the TLS-enabled electrum server.

Notes to the reviewers

This PR is a followup of #421

Checklist

  • I've signed all my commits
  • I ran just lint
  • I ran cargo test
  • I've checked the integration tests
  • I've followed the contribution guidelines
  • I'm linking the issue being fixed by this PR (if any)

@qlrd qlrd force-pushed the rcgen-ssl-certs branch 3 times, most recently from 28e3141 to 28b5293 Compare March 28, 2025 16:03
@qlrd qlrd force-pushed the rcgen-ssl-certs branch from 28b5293 to fb51957 Compare April 3, 2025 13:08
@Davidson-Souza
Copy link
Member

Sorry for holding you on this, but I think this new option deserves a mention on README.

@qlrd
Copy link
Contributor Author

qlrd commented Apr 3, 2025

Sorry for holding you on this, but I think this new option deserves a mention on README.

🫡 No need to sorry, it's my fault to not did it yet.

@qlrd qlrd force-pushed the rcgen-ssl-certs branch from fb51957 to 8e07216 Compare April 3, 2025 15:12
@Davidson-Souza
Copy link
Member

I like the changes, but this is changing way more than just adding ssl stuff on readme 😂

Copy link
Contributor

@jaoleal jaoleal left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

cACK

@qlrd
Copy link
Contributor Author

qlrd commented Apr 3, 2025

I like the changes, but this is changing way more than just adding ssl stuff on readme 😂

Maybe more simple than explaining the consequences and put it on another place after #429?

@Davidson-Souza
Copy link
Member

Maybe more simple than explaining the consequences and put it on another place after

Please leave the section about ssl and remove the other changes to README.

@qlrd qlrd force-pushed the rcgen-ssl-certs branch from 8e07216 to 4951f41 Compare April 4, 2025 16:19
@qlrd
Copy link
Contributor Author

qlrd commented Apr 4, 2025

Maybe more simple than explaining the consequences and put it on another place after

Please leave the section about ssl and remove the other changes to README.

Sure, sorry for other removes. I didn't had attention that was a neo-vim linter stuff.

@qlrd qlrd force-pushed the rcgen-ssl-certs branch from 4951f41 to 34ead0e Compare April 4, 2025 16:50
@qlrd qlrd requested review from jaoleal and Davidson-Souza April 4, 2025 16:54
Copy link
Member

@Davidson-Souza Davidson-Souza left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ACK 34ead0e

@Davidson-Souza
Copy link
Member

@qlrd needs rebase

@qlrd qlrd force-pushed the rcgen-ssl-certs branch from 34ead0e to 47c432c Compare April 5, 2025 00:46
@qlrd qlrd requested a review from Davidson-Souza April 5, 2025 13:47
@qlrd qlrd force-pushed the rcgen-ssl-certs branch from 47c432c to 711f406 Compare April 6, 2025 18:05
qlrd added 2 commits April 6, 2025 15:13
Fix vinteumorg#423

This flag, when passed to florestad, will create a ssl folder in
<data-dir> and <data-dir>/ssl/key.pem and a
self-signed<data-dir>/ssl/cert.pem.

This self-signed certificate can be a option to users that do not have
certificates with a trusted chain. It's important to note that the
private-key isn't encrypted.

More specifically, this commit add:

* a flag --gen-selfsigned-cert on CLI;

* some enums elements on error.rs;

* a generate_selfsigned_certificate on florestad.rs;

* a new step on florestad::start method before creating the
TLS-enabledelectrum server.
The readme give some instructions about node:

* with a non-TLS enabled electrum;
* with a TLS enabled electrum given a PKCS#8 private-key / certificate;
* with a TLS enabled electrum with self-signed PKCS#8 private-key /
certificate;
@qlrd qlrd force-pushed the rcgen-ssl-certs branch from 711f406 to e9f2574 Compare April 6, 2025 18:13
Copy link
Member

@Davidson-Souza Davidson-Souza left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

reACK e9f2574

@Davidson-Souza Davidson-Souza merged commit a7b5972 into vinteumorg:master Apr 7, 2025
8 checks passed
lucad70 added a commit to lucad70/Floresta that referenced this pull request Apr 11, 2025
- Renamed files build_mac_os.md and build_unix.md
- Added instruction to generate SSL certificates vinteumorg#425
lucad70 added a commit to lucad70/Floresta that referenced this pull request Apr 11, 2025
This commit changes the way that the README is structured. It used to be everything under one file but now it is separated in different files in a new folder.

- Renamed files build_mac_os.md and build_unix.md
- Added instruction to generate SSL certificates vinteumorg#425
- Cleaned README.md
- Applied NITs
- Rephrased instructions
- Added fuzzing target suggestion
lucad70 added a commit to lucad70/Floresta that referenced this pull request Apr 11, 2025
This commit changes the way that the README is structured. It used to be everything under one file but now it is separated in different files in a new folder.

- Renamed files build_mac_os.md and build_unix.md
- Added instruction to generate SSL certificates vinteumorg#425
- Cleaned README.md
- Applied NITs
- Rephrased instructions
- Added fuzzing target suggestion
lucad70 added a commit to lucad70/Floresta that referenced this pull request Apr 14, 2025
This commit changes the way that the README is structured. It used to be everything under one file but now it is separated in different files in a new folder.

- Renamed files build_mac_os.md and build_unix.md
- Added instruction to generate SSL certificates vinteumorg#425
- Cleaned README.md
- Applied NITs
- Rephrased instructions
- Added fuzzing target suggestion

Added link to setting-functional-tests-binaries

Added sugestions
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

[Enhancement] Add command to generate SSL files with florestad
3 participants
点击 这是indexloc提供的php浏览器服务,不要输入任何密码和下载