Skip to content

SSL/TLS Support#90

Merged
shawnhathaway merged 5 commits intotemporalio:masterfrom
shawnhathaway:tls
May 22, 2020
Merged

SSL/TLS Support#90
shawnhathaway merged 5 commits intotemporalio:masterfrom
shawnhathaway:tls

Conversation

@shawnhathaway
Copy link
Copy Markdown
Contributor

This adds HTTPS/SSL/TLS support for clients by exposing two new options under WorkflowServiceStubs -

  • EnableHttps
    • This should be enabled when clients wish to connect securely in a simple HTTPS scenario with no client authentication and a host configured with trusted root authorities. This is similar to if you just browsed to a website and if you got a green checkmark.
  • SslContext
    • This should be used when using advanced TLS scenarios such as manual RootCAs and mutual TLS.
    • An example of this being specified can be seen here.
    • This supersedes enableHttps.

.build();
NettyChannelBuilder builder =
NettyChannelBuilder.forTarget(options.getTarget())
.defaultLoadBalancingPolicy("round_robin");
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

let's add it to the options as well then.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is a required setting on our side afaik. Mind if I tackle this in a follow up change as we'd likely want to expose this on go-ask side as well?

@shawnhathaway shawnhathaway marked this pull request as ready for review May 21, 2020 01:40
@shawnhathaway shawnhathaway merged commit 5665098 into temporalio:master May 22, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants