search

BoltzExchange / boltz-client

Boltz Client for CLN & LND
MIT License
37 stars 13 forks source link

SSL connection to CLN fails using a custom certificate #218

Closed s373nZ closed 1 month ago

s373nZ commented 1 month ago

After following the instructions in the CLN documentation here to install a custom certificate into CLN (in order to run CLN under SSL over Tor), the boltzd service is failing to connect to CLN with the error:

2024-07-20 15:31:08.930 [WARN ] Could not connect to lightning node: rpc error: code = Unavailable desc = connection error: desc = "transport: authentication handshake failed: tls: failed to verify certificate: x509: certificate is not valid for any names, but wanted to match cln"

The ServerName for certificate validation is hardcoded here. One option is to regenerate my custom certificates with cln included as a SAN, but it sounds like boltzd shouldn't make such particular assumptions regarding the certificate settings, especially with custom certificates supported by CLN.

kilrau commented 1 month ago

Yep, we'll fix this on our end

kilrau commented 1 month ago

Fix is on master as you can see, we plan to include this in an official release towards end of the week

kilrau commented 3 weeks ago

Release with the fix is finally out, sorry for the wait: https://github.com/BoltzExchange/boltz-client/releases/tag/v2.1.1