TLS

XMRigCCServer

Option 1 - Generate TLS certificates

openssl genrsa -out server.key 1024
openssl req -days 365 -out server.pem -new -x509 -key server.key

Option 2 - Use letsencrypt / certbot

Follow the guide: https://certbot.eff.org/

After settings up make sure you copy your cert and keyfile to your XMRigCCServer folder whenever they change.

sudo cp /etc/letsencrypt/live/yourdomain.com/privkey.pem /path/to/xmrigCC/server.key
sudo cp /etc/letsencrypt/live/yourdomain.com/fullchain.pem /path/to/xmrigCC/server.pem

Configuration of XMRigCCServer

Make sure you enable tls and set the path to your cert/key file in your XMRigCCServer config: (config_cc.json)

{
...
        "use-tls" : true,
        "cert-file" : "server.pem",
        "key-file" : "server.key",
...
}

XMRigCCMiner

Using TLS for Miner->Pool communication

To turn on TLS make sure you're using a Pool+Port which is able to handle TLS requests.

Then change the miner config this way:

"pools": [
        {
            "url": "serverwhichsupportstls.com:443",
            "use-tls" : true,
...
        }
    ],

Using TLS for Miner->CC Server communication

To turn on TLS make sure you've turned on TLS in XMRigCCServer and provided valid TLS certs to it.

Then change the miner config this way:

"cc-client": {
        "url": "yourccserver:3344",
        "use-tls" : true,
...
    }