NATS TLS authentication

maxpert / marmot

A distributed SQLite replicator built on top of NATS

https://maxpert.github.io/marmot/

MIT License

1.7k stars 42 forks source link

Closed arnarg closed 11 months ago

arnarg commented 11 months ago

Are you open for support for TLS authentication in NATS being added?

This will require a SIGHUP (or any way of triggering a reload) handler that can re-read the certificate and key from the provided path.

Also it seems to be impossible to specify a custom CA certificate for the connection.

This could look something like this in the config:

[nats]
urls=["nats://localhost:4222"]
ca_file="/tmp/nats/ca.crt"
cert_file="/tmp/nats/client.crt"
key_file="/tmp/nats/client.key"

maxpert commented 11 months ago

Great callout. Was on my dashboard. Will eventually get to it before v0.9.x but feel free to send out PR if you can contribute.