ConfigOption/tls key path

From Snowblossom Wiki
Jump to: navigation, search

tls_key_path

Controls which key is used for signing the certificates used for TLS server side communication.

When TLS service ports are enabled, this must be set.

If the path is empty, it will be created on startup. To get the node: address for the key, either look at the logs for a line like:

   INFO: My TLS address: node:h68q5s0xxs3pc5xhcyfa076j2a6942y6edlxn429

Or see address.txt in the tls_key_path directory.

General URI form is: schema://host[:port][/?key=node:...]

If using grpc+tls, the optional key parameter specifies which TLS key the node is expected to use.

For best security and privacy it is best to use grpc+tls and specify the key.

Default

None