-
Notifications
You must be signed in to change notification settings - Fork 63
Added --gen-selfsigned-cert flag #425
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
28e3141
to
28b5293
Compare
Sorry for holding you on this, but I think this new option deserves a mention on README. |
🫡 No need to sorry, it's my fault to not did it yet. |
I like the changes, but this is changing way more than just adding ssl stuff on readme 😂 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
cACK
Maybe more simple than explaining the consequences and put it on another place after #429? |
Please leave the section about ssl and remove the other changes to README. |
Sure, sorry for other removes. I didn't had attention that was a neo-vim linter stuff. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
ACK 34ead0e
@qlrd needs rebase |
Fix vinteumorg#423 This flag, when passed to florestad, will create a ssl folder in <data-dir> and <data-dir>/ssl/key.pem and a self-signed<data-dir>/ssl/cert.pem. This self-signed certificate can be a option to users that do not have certificates with a trusted chain. It's important to note that the private-key isn't encrypted. More specifically, this commit add: * a flag --gen-selfsigned-cert on CLI; * some enums elements on error.rs; * a generate_selfsigned_certificate on florestad.rs; * a new step on florestad::start method before creating the TLS-enabledelectrum server.
The readme give some instructions about node: * with a non-TLS enabled electrum; * with a TLS enabled electrum given a PKCS#8 private-key / certificate; * with a TLS enabled electrum with self-signed PKCS#8 private-key / certificate;
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
reACK e9f2574
- Renamed files build_mac_os.md and build_unix.md - Added instruction to generate SSL certificates vinteumorg#425
This commit changes the way that the README is structured. It used to be everything under one file but now it is separated in different files in a new folder. - Renamed files build_mac_os.md and build_unix.md - Added instruction to generate SSL certificates vinteumorg#425 - Cleaned README.md - Applied NITs - Rephrased instructions - Added fuzzing target suggestion
This commit changes the way that the README is structured. It used to be everything under one file but now it is separated in different files in a new folder. - Renamed files build_mac_os.md and build_unix.md - Added instruction to generate SSL certificates vinteumorg#425 - Cleaned README.md - Applied NITs - Rephrased instructions - Added fuzzing target suggestion
This commit changes the way that the README is structured. It used to be everything under one file but now it is separated in different files in a new folder. - Renamed files build_mac_os.md and build_unix.md - Added instruction to generate SSL certificates vinteumorg#425 - Cleaned README.md - Applied NITs - Rephrased instructions - Added fuzzing target suggestion Added link to setting-functional-tests-binaries Added sugestions
Fix #423
What is the purpose of this pull request?
Which crates are being modified?
Description
This flag, when passed to florestad, will create a ssl folder in
<data-dir>
and<data-dir>/ssl/key.pem
and a self-signed<data-dir>/ssl/cert.pem
. This self-signed certificate can be a option to those users that do not have certificates with a trusted chain. It's import to note that the private-key isn't encrypted.More specifically, this commit add:
a flag --gen-selfsigned-cert on CLI;
some enums elements on error.rs
a generate_selfsigned_certificate on florestad.rs;
a new step on florestad::start method before creating the TLS-enabled electrum server.
Notes to the reviewers
This PR is a followup of #421
Checklist
just lint
cargo test