Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[ADDED] LeafNode: TLSHandshakeFirst option #4119

Merged
merged 1 commit into from
May 1, 2023
Merged

Commits on May 1, 2023

  1. [ADDED] LeafNode: TLSHandhsakeFirst option

    A new field in `tls{}` blocks force the server to do TLS handshake
    before sending the INFO protocol.
    ```
    leafnodes {
       port: 7422
       tls {
          cert_file: ...
          ...
          handshake_first: true
       }
       remotes [
           {
             url: tls://host:7423
             tls {
                ...
                handshake_first: true
             }
           }
       ]
    }
    ```
    Note that if `handshake_first` is set in the "accept" side, the
    first `tls{}` block in the example above, a server trying to
    create a LeafNode connection to this server would need to have
    `handshake_first` set to true inside the `tls{}` block of
    the corresponding remote.
    
    Configuration reload of leafnodes is generally not supported,
    but TLS certificates can be reloaded and the support for this
    new field was also added.
    
    Signed-off-by: Ivan Kozlovic <ivan@synadia.com>
    kozlovic committed May 1, 2023
    Configuration menu
    Copy the full SHA
    0a02f21 View commit details
    Browse the repository at this point in the history