search

Lucretius / vault_raft_snapshot_agent

⛔️ DEPRECATED ⛔️ An agent which provides periodic snapshotting capabilities of Vault's Raft backend
MIT License
78 stars 42 forks source link

any way to skip tls certificate verify? #7

Open pracplayopen opened 3 years ago

pracplayopen commented 3 years ago

was able to get server configured and starting but it's refusing connection at my addr value.

since i'm taking this value straight from vault config (and can connect with it via clients), i'm guessing that it's because i'm using a private cert that tls doesn't like.

in the vault client or curl, you can disable tls certificate verification (-tls-skip-verify in vault cli).

I don't see an option in the config file to do something similiar. Is there an undocumented way to acheive same? Or can I somehow modify this in go with an environment variable?

appreciate any guidance and thanks for all your hard work.

mooneye14 commented 3 years ago

Is the snapshot_agent running on the same server as Vault services? You can make a listener in Vault config HCL to allow localhost connections with no TLS then set "addr::http://127.0.0.1:8200" listener "tcp" { address = "127.0.0.1:8200" tls_disable = 1 }