EGA-archive / LocalEGA

A federated storage for sensitive data
http://localega.readthedocs.io
Apache License 2.0
7 stars 16 forks source link

Enforcing client/server verification at the transport layer #61

Closed silverdaz closed 5 years ago

silverdaz commented 5 years ago

Description

TLS is used to encrypt the traffic, but it can also be used to verify the server and (optionally) the client.

Definition of Done

Besides the regular TLS encryption, the database and message brokers enforce the verification Python/Java clients.

How to test

Apart from the usual tests successfully completing, one can start another container, without the required certificates, and attempt to connect to either the database or one of the message brokers. The connection should be denied. Connections should be accepted only for the properly set up containers.