cablelabs / lpwanserver

LPWAN Provisioning & Management Server
https://lpwanserver.com
Apache License 2.0
37 stars 11 forks source link

Use HTTPS in development #301

Closed rhythnic closed 5 years ago

rhythnic commented 5 years ago

IP devices are required to pass an x509 certificate to authenticate. This means that the server needs to use TLS. Aside from using TLS, the LPWAN Server needs access to the client's certificate. Node makes this pretty easy if the server is configured with certificates. You can use a reverse proxy to secure a node server with TLS, but there's no standard way of passing the client certificate back to the server. For now, the easiest way forward is to require the LPWAN Server be deployed to use TLS. Let's make the passing of a client certificate from an upstream proxy or load balancer a future enhancement.