search

owntracks / talk

Questions, talk about OwnTracks
32 stars 4 forks source link

Inline TLS certificates in OTRC? #100

Closed srgvg closed 2 years ago

srgvg commented 4 years ago

As an Android user, I report this here, but I suspect it's also valid for the IoS version.

It's currently possible to almost fully configure the client by uploading a custom configuration management file holding a json snippet. AFAICS, the only thing that possibly needs to be done on top (or before) that, is selecting the file containing the CA certificate, referenced in tlsCaCrt, and an optional Client Certificate.

My Suggestion: allow the certificates to be supplied inline in the json. Partly related: would it be a good and handy idea to allow to retrieve that json via an url, to be downloaded?

On a side note: I'm not sure if the user password and the Client Certificate password can be configured through that file? The former seems only referenced by the usePassword key, being set to true.

Thank you for this very nice software, and optionally for considering my suggestion :-)

jpmens commented 4 years ago

Thank you, @srgvg, for the kind words and for the suggestion. I think this would be possible for the TLS CA certificate, but it might be tricky (as in ‘unsafe’) for a potential TLS Client cert. We’ll give it some thought.

Meanwhile I’ve transferred your suggestion to our “talk/“ repository as it would, indeed, concern both client operating systems.

jpmens commented 2 years ago

Closing as stale.