pancho horrillo 1e63f3c104 feat: Control API uses automatic cross-pinning mTLS (Closes #119) ...

. kapow server generates on startup a pair of certificates
that will use to secure communications to its control server.
It will communicate the server and client certificates as well
as the client private key to the init programs it launches,
via environment variables.

. kapow server now understands a new flag --control-reachable-addr
which accepts either a IP address or a DNS name, that can be used
to ensure that the generated server certificate will be appropiate
in case the control server must be accessed from something other
than localhost.

Co-authored-by: Roberto Abdelkader Martínez Pérez <robertomartinezp@gmail.com>

2021-03-12 17:24:17 +01:00

6.4 KiB

Raw Blame History

View Raw