neogeno / shango-lightning-wallet

Shango Lightning Wallet
66 stars 4 forks source link

self signed certificate / SSL issue #63

Closed jarole closed 5 years ago

jarole commented 5 years ago

Hello

Can you provide me some guide, how to set up self-signed TLS/SSL certificate for lnd and use it for shango? What is your configuration ? I got self signed, but the app can't connect to the node. Cert issued to IP 0.0.0.0 Shall I import the cert to the phone? App has no option for that. thanks for any help and hint...

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a4:85:38:17:7a:9e:6d:ad
    Signature Algorithm: ecdsa-with-SHA256
        Issuer: CN = localhost, O = lnd
        Validity
            Not Before: Dec 20 10:11:51 2018 GMT
            Not After : Nov 26 10:11:51 2118 GMT
        Subject: CN = localhost, O = lnd
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:a8:31:45:11:b9:c6:7b:e9:ef:bc:17:98:f2:ba:
                    e2:07:8d:f3:f7:38:c3:2d:47:66:a7:f3:bf:75:4c:
                    3f:cd:b2:36:96:49:4f:f5:b2:76:5f:12:c1:29:69:
                    c5:fe:91:44:4a:81:c7:11:75:a8:bc:36:a8:30:7e:
                    ad:96:cc:bf:5b
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Subject Alternative Name: 
                DNS:localhost, DNS:ln.domain.my, IP Address:0.0.0.0
    Signature Algorithm: ecdsa-with-SHA256
         30:46:02:21:00:ef:ee:66:e2:6a:1f:21:f6:bf:6e:e8:e3:ab:
         1f:94:83:1a:99:ff:04:ec:07:a5:74:fb:cc:63:cb:24:b1:1c:
         6d:02:21:00:e9:01:d0:27:b7:bf:ee:49:e3:c6:e7:34:04:9f:
         8f:61:30:34:78:7e:a3:fc:b3:1a:fc:ad:d0:4d:5f:47:9b:53

Error Most likely SSL certificate auth. failure. PLease hceck your connection IP...

jarole commented 5 years ago

I let lnd to create the cert automaticaly. So it is not working if cert is created manually. That works! sorry for spam :)