Skip to content

🦭 Implement Certificate Authority #1704

@teon

Description

@teon
  • Research rust libraries to generate own CA
  • Issue certificates based on CSRs
  • Implement Proxy to create CSRs
  • Implement initial handshake with Core that setups certificates in Proxy (if it doesn't already have certificates)
  • Handle graceful restart of either Core or Proxy
  • Persist all certificates/keys in Core
  • Persist all certificates/keys in Proxy
  • Make sure that when core/proxy restarts after certificate setup, the communication automatically switches to HTTPS and skips the handshaking phase
  • Error handling in Proxy, consider edge cases
  • Error handling in Core, consider edge cases
  • Prepare the feature for a HA environment
  • Make sure any errors during the setup are propagated to Core

Not planned:

  • Launch HTTPS with own cert for "aditional" (without reverse-proxy)

Sub-issues

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    Status

    Refinement ready

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions