History

SSMP 6c01ffc0b7 updated example certs		2016-09-10 15:09:44 -07:00
..
basic	major revisions to binary, hex and other rawBuffer sockets	2016-03-23 00:07:37 -07:00
basic-local-only	major revisions to binary, hex and other rawBuffer sockets	2016-03-23 00:07:37 -07:00
basic-more-secure	major revisions to binary, hex and other rawBuffer sockets	2016-03-23 00:07:37 -07:00
basic-most-secure	major revisions to binary, hex and other rawBuffer sockets	2016-03-23 00:07:37 -07:00
basicSync	major revisions to binary, hex and other rawBuffer sockets	2016-03-23 00:07:37 -07:00
Multi-Client-Broadcast-basic	major revisions to binary, hex and other rawBuffer sockets	2016-03-23 00:07:37 -07:00
rawBuffer-only-works-with-most-secure	major revisions to binary, hex and other rawBuffer sockets	2016-03-23 00:07:37 -07:00
readme.md	updated example certs	2016-09-10 15:09:44 -07:00

readme.md

Using TLS and SSL for Secure node-ipc

document in progress

Still working on this. If you look at the examples and can help, please jump right in.

important cli commands

openssl genrsa -out server.key 2048
openssl req -new -x509 -key server.key -out server.pub -days 365 -config openssl.cnf
openssl req -new -x509 -key client.key -out client.pub -days 365 -config openssl.cnf
talk about openssl.cnf edits

using the local node-ipc certs

This should ONLY be done on your local machine. Both the public and private certs are available here on git hub, so its not a good idea to use them over the network.

talk about security

keep private keys private, don't share

talk about using hostname not ip for best security validation of certs

examples

basic with default keys
specikfying keys
encrypted but venerable to man in the middle
two way authenticated pub private