Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SSL Cert for GUI #4404

Open
skironDotNet opened this issue Jan 25, 2025 · 0 comments
Open

SSL Cert for GUI #4404

skironDotNet opened this issue Jan 25, 2025 · 0 comments

Comments

@skironDotNet
Copy link

skironDotNet commented Jan 25, 2025

In regards to this setup, can you add ability to include SSL cert?
https://www.getmonero.org/resources/user-guides/remote_node_gui.html

Here is my remote daemon config file

p2p-use-ipv6=0
rpc-use-ipv6=0

rpc-bind-ip=111.111.111.111 #demo only

#valid only for network mode host, otherwise comment out to use default and use docker ports to map to desired from container port 
rpc-bind-port=12345 #demo only
confirm-external-bind=1

rpc-ssl=enabled
rpc-ssl-private-key=/data/monero-ssl.priv
rpc-ssl-certificate=/data/monero-ssl.crt

## only clients using TLS cert with this fingerprint will be allowed
rpc-ssl-allowed-fingerprints=dc0049ffc00f18fae35558147b3154ae48468f8d4efb24e1a149d89dfd8386a2

rpc-login=demoonly:passssword

I can work with SSL protected daemon using monero-wallet-cli with this client.config file

daemon-address=111.111.111.111:12345
trusted-daemon=1

daemon-ssl=enabled
daemon-ssl-private-key=/home/user/wallets/xmr/ssl/client-ssl.key
daemon-ssl-certificate=/home/user/wallets/xmr/ssl/client-ssl.crt

## fingerprint of cert expected from server
daemon-ssl-allowed-fingerprints=5b531fd3c33dbfb83d67ed9fcdd9adeb79d8b8252fbcb5d5d3687031a68c5882

daemon-login=demoonly:passssword

So I use SSL tunnel and both the server (monerod) and the client (monero-wallet-cli) validate each other certificate fingerprint (mutual TLS), essentially only I can connect with myself. The daemon is not public endpoint.

Could you add ability to setup GUI to also use values as in client.config file ?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant