Skip to content
This repository was archived by the owner on Jun 25, 2024. It is now read-only.

Add support for external SSL providers. Also adds support for ZeroSSL from the beginning#2

Open
gkrizek wants to merge 8 commits intoencrypt-tls-keyfrom
certificate-provider
Open

Add support for external SSL providers. Also adds support for ZeroSSL from the beginning#2
gkrizek wants to merge 8 commits intoencrypt-tls-keyfrom
certificate-provider

Conversation

@gkrizek
Copy link
Member

@gkrizek gkrizek commented Oct 28, 2020

Adding support for LND to provision SSL certificates from ZeroSSL.

gkrizek and others added 8 commits October 11, 2020 22:28
… its own package called lnencrypt

The functions inside of the crypto.go file in chanbackup (like EncryptPayloadToWriter and DecryptPayloadFromReader) can be used by a lot of things outside of just the chanbackup package. We can't just reference them directly from the chanbackup package because it's likely that it would generate circular dependencies. Therefore we need to move these functions into their own package to be referenced by chanbackup and whatever new functionality that needs them
This commit adds support in lnd to encrypt the TLS private key on disk with the wallet's seed. This obviously causes issues when the wallet is locked. So for the WalletUnlocker RPC we generate ephemeral TLS certificates with the key stored in memory. This feature is enabled with the --tlsencryptkey flag.
…ficate can't be issued. Also adds the ability to revoke the temporary certificates
Add support to CSR for multiple domains
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants