Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support TLS when talking to backend APIs #92

Open
michaelweiser opened this issue Aug 5, 2019 · 0 comments
Open

Support TLS when talking to backend APIs #92

michaelweiser opened this issue Aug 5, 2019 · 0 comments
Milestone

Comments

@michaelweiser
Copy link
Contributor

Now that we're actually doing authentication when talking to the Cuckoo API (#91) the next logical step is to make sure we're talking to the right server and encrypt the connection so the authentication token isn't compromised. Both would be handled by switching the API connection to HTTPS.

This might be possible without any code change by adjusting the url parameter in peekaboo.conf:cuckoo. It would require the CA cert of the Cuckoo API's certificate to be in the system-wide cert store, though. Since it's an internal backend connection, users will likely want to use self-signed or non-offical-CA-signed certificates for it. So we should at the very least allow an alternate CA cert path.

Additionally, when using an official CA we should account for certificate revocation and therefore allow configuration and checking of a CRL or OCSP responder (Phew but the right way to do it[tm] IMO).

@michaelweiser michaelweiser added this to the 2.0 milestone Aug 5, 2019
@Jack28 Jack28 modified the milestones: 2.0, 2.1 Aug 27, 2019
@michaelweiser michaelweiser modified the milestones: 2.1, 2.2 Mar 16, 2022
@michaelweiser michaelweiser changed the title Support TLS when talking to Cuckoo API Support TLS when talking to backend APIs Mar 16, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants