Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Network: don't enable TLS when not configured #2877

Merged
merged 3 commits into from
Mar 6, 2024

Conversation

reinkrul
Copy link
Member

@reinkrul reinkrul commented Mar 6, 2024

This removes network.enabletls, which was used in demo/workshop environments. But running without TLS will now also be useful when a node only uses did:web, and having to disable a Network property is inconvenient then.

So, with this change TLS won't be enabled when it's not configured. TLS must be enabled when:

  • strict mode is enabled, and
  • the network is to be used, determined by:
    • bootstrap node is configured
    • DAG not empty (if the Nuts node uses the gRPC network but un-configured the bootstrap node after initial sync)

Also removes deprecated config TLS properties.

Fixes #2864

@reinkrul reinkrul marked this pull request as ready for review March 6, 2024 13:04
@reinkrul reinkrul requested review from gerardsn and woutslakhorst and removed request for gerardsn March 6, 2024 13:04
@reinkrul reinkrul merged commit da48d0e into master Mar 6, 2024
8 of 9 checks passed
@reinkrul reinkrul deleted the network/drop-enabletls branch March 6, 2024 15:58
rolandgroen added a commit that referenced this pull request Mar 8, 2024
* master: (40 commits)
  Bump github.com/go-jose/go-jose/v3 from 3.0.1 to 3.0.3 (#2889)
  StatusList2021: add e2e test (#2881)
  remove default storage backend (#2885)
  Bump github.com/lestrrat-go/jwx/v2 from 2.0.20 to 2.0.21 (#2887)
  SQL: Rename table vdr_didweb to did (#2882)
  VDR: Replace v2 API panics with errors (#2872)
  Network: don't enable TLS when not configured (#2877)
  Statuslist: Merge issuer and verifier (#2851)
  revert go-version to stable (#2879)
  set column length for did and id (#2878)
  Bump golang from 1.22.0-alpine to 1.22.1-alpine (#2876)
  Bump google.golang.org/protobuf from 1.32.0 to 1.33.0 (#2875)
  Docker: drop 'v' prefix from versions (#2855)
  Upgrade to go 1.22 (#2862)
  Bump google.golang.org/grpc from 1.62.0 to 1.62.1 (#2874)
  Bump golang.org/x/crypto from 0.20.0 to 0.21.0 (#2859)
  HTTP: correct status code logging for errors (#2848)
  IAM: Handle ErrNotFound for unknown tokens when introspecting (#2847)
  Bump github.com/stretchr/testify from 1.8.4 to 1.9.0 (#2849)
  allow for empty VPs (#2840)
  ...
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Reconsider TLS options for network
2 participants