ehazlett / stellar

Simplified Container System
MIT License
1.14k stars 35 forks source link

TLS support for GRPC in server and client #13

Closed ehazlett closed 5 years ago

ehazlett commented 5 years ago

This adds TLS support for the GRPC backend. The following options are supported:

Note: for a quick setup you can generate a self-signed certificate and use the cert and key for both the server and client as long as verification is disabled.

Example Config

    "TLSServerCertificate": "/etc/certs/server.crt",
    "TLSServerKey": "/etc/certs/server.key",
    "TLSClientCertificate": "/etc/certs/client-00.crt",
    "TLSClientKey": "/etc/certs/client-00.key",
    "TLSInsecureSkipVerify": true,

If the options are left as empty strings ("") or removed from the config, TLS is disabled.