canonical / identity-platform-login-ui

Login UI for the Canonical identity broker and identity provider solution
Apache License 2.0
10 stars 6 forks source link

CA bundle for HTTPS communication with LetsEncrypt #251

Closed shipperizer closed 2 months ago

shipperizer commented 3 months ago

Hydra and Kratos dependencies will eventually be hosted behind HTTPS and Login UI will need to be able to communicate securely with these API

to get this working we should aim at implementing https://github.com/canonical/identity-platform-login-ui-operator/issues/109 as soon as possible but as a stop gap solution we could exploit the same way we are doing for kratos rock https://github.com/canonical/kratos-rock/blob/main/rockcraft.yaml#L38-L57

this would cover the case where we are using publicly trusted CAs which have their CA bundle packaged in the ca-certificates debian package

support for self-signed certificates would still require https://github.com/canonical/identity-platform-login-ui-operator/issues/109 to be implemented

syncronize-issues-to-jira[bot] commented 3 months ago

Thank you for reporting us your feedback!

The internal ticket has been created: https://warthogs.atlassian.net/browse/IAM-949.

This message was autogenerated