Support `--skipverify` to skip verifying lbcd's TLS certificate #5

New issue

Closed

opened 2022-05-16 07:49:18 +02:00 by roylee17 · 0 comments

roylee17 commented

2022-05-16 07:49:18 +02:00

(Migrated from github.com)

Currently, lbcd only support non-TLS connection on localhost, which is a good constraint we don't want to relax.

However, running lbcd and lbcwallet on different hosts or containers requires properly setup of lbcd TLS certificate and distribute the CA certificate to lbcwallet.

Skip verifying lbcd's certificate is a trade-off allowing lbcwallet to connect a "trusted" lbcd node over TLS.

Currently, `lbcd` only support non-TLS connection on localhost, which is a good constraint we don't want to relax. However, running `lbcd` and `lbcwallet` on different hosts or containers requires properly setup of `lbcd` TLS certificate and distribute the CA certificate to lbcwallet. Skip verifying lbcd's certificate is a trade-off allowing `lbcwallet` to connect a "trusted" `lbcd` node over TLS.