tech5usa / TLSential

A server for providing short-lived TLS certificates to all services within a firewall restricted network.
GNU General Public License v3.0
15 stars 2 forks source link

Serve over Https by default and warn sternly if they don't #48

Closed d1str0 closed 4 years ago

d1str0 commented 4 years ago

This PR addresses the following issues:

No current issue, but no support for HTTPS as is.

Context

Currently you cannot serve TLSential over https.

Approach

Add a command line flag to allow for NON https and default to serve over https with default crt/key filepaths.

Testing

Start in non-https so I could use it to create a cert for itself, once done and downloaded, restart and use those newly minted certs. All worked, and all command line flags worked.

Misc.

Will want to follow this up to make it easier to bootstrap TLS ala #47