Skip to content
This repository has been archived by the owner on Jun 25, 2024. It is now read-only.

Add support for external SSL providers. Also adds support for ZeroSSL from the beginning #2

Open
wants to merge 8 commits into
base: encrypt-tls-key
Choose a base branch
from

Conversation

gkrizek
Copy link
Member

@gkrizek gkrizek commented Oct 28, 2020

Adding support for LND to provision SSL certificates from ZeroSSL.

gkrizek and others added 8 commits October 11, 2020 22:28
… its own package called lnencrypt

The functions inside of the crypto.go file in chanbackup (like EncryptPayloadToWriter and DecryptPayloadFromReader) can be used by a lot of things outside of just the chanbackup package. We can't just reference them directly from the chanbackup package because it's likely that it would generate circular dependencies. Therefore we need to move these functions into their own package to be referenced by chanbackup and whatever new functionality that needs them
This commit adds support in lnd to encrypt the TLS private key on disk with the wallet's seed. This obviously causes issues when the wallet is locked. So for the WalletUnlocker RPC we generate ephemeral TLS certificates with the key stored in memory. This feature is enabled with the --tlsencryptkey flag.
…ficate can't be issued. Also adds the ability to revoke the temporary certificates
Add support to CSR for multiple domains
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants