Skip to content

Generate server side certificates on initialization for usage by the Auth service #5

@lutzmor

Description

@lutzmor

On quickstart initialization, certificates should be generated.
Consider https://www.npmjs.com/package/ursa
or https://www.npmjs.com/package/node-rsa
or https://www.npmjs.com/package/node-forge (can generate both rsa and crt keys)

When initialized, the private key MUST NOT be committed (.gitignore it) but it should be echoed to the console so that the developer can store it somewhere.

An ssl cert should be generated from the key pair, and the server startup should support https on port 8443 (localhost). Note that when in production, it should actually be http only, as ssl termination should be at the load balancer for performance, as once in the docker weave network, ssl security is superfluous. Consider leaving getting https working for a later release unless there is demand.

As teams will be starting projects at separate times, they should generate their own keys, so the key generation should be checked on startup, just with a confirm if not in production. If in production, refuse to start the server.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions