Skip to content

Commit

Permalink
Documentation update
Browse files Browse the repository at this point in the history
Fixes eclipse#659

Also clarifies jwt token naming for server and
need to specify servername for tls
  • Loading branch information
erikbosch authored and SebastianSchildt committed Sep 21, 2023
1 parent b4f0410 commit 52ad30a
Showing 1 changed file with 5 additions and 2 deletions.
7 changes: 5 additions & 2 deletions kuksa-client/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -90,15 +90,15 @@ There is actually no reason to specify client key and certificate, as mutual aut
so the command can be simplified like this:

```
kuksa-client --cacertificate ./kuksa_certificates/CA.pem grpcs://localhost:55555
kuksa-client --cacertificate ./kuksa_certificates/CA.pem grpcs://localhost:55555
```

The example server protocol list 127.0.0.1 as an alternative name, but the TLS-client currently used does not accept it,
instead a valid server name must be given as argument.
Currently `Server` and `localhost` are valid names from the example certificates.

```
kuksa-client --cacertificate ../kuksa_certificates/CA.pem --tls-server-name Server grpcs://127.0.0.1:55555
kuksa-client --cacertificate ../kuksa_certificates/CA.pem --tls-server-name Server grpcs://127.0.0.1:55555
```

### TLS with val-server
Expand All @@ -114,6 +114,9 @@ This corresponds to this call:
kuksa-client --cacertificate ../kuksa_certificates/CA.pem wss://localhost:8090
```

In some environments the `--tls-server-name` argument must be used to specify alternative server name
if connecting to the server by numerical IP address like `wss://127.0.0.1:8090`.

### Authorizing against KUKSA Server
If the connected KUKSA Server or KUKSA Databroker require authorization the first step after a connection is made is to authorize. KUKSA Server and KUKSA Databroker use different token formats.

Expand Down

0 comments on commit 52ad30a

Please sign in to comment.