Commit Graph

11 Commits

Author SHA1 Message Date
2f35b9aa7f cert: add TLS reloader and return bytes from GenCert
Co-authored-by: gkrizek <graham@krizek.io>
2022-11-01 16:44:18 -05:00
7dfe4018ce multi: use btcd's btcec/v2 and btcutil modules
This commit was previously split into the following parts to ease
review:
 - 2d746f68: replace imports
 - 4008f0fd: use ecdsa.Signature
 - 849e33d1: remove btcec.S256()
 - b8f6ebbd: use v2 library correctly
 - fa80bca9: bump go modules
2022-03-09 19:02:37 +01:00
786568fa46 cert: allow cert expiry to be set in config 2021-04-05 20:23:33 -07:00
86a0609ecf config+lnd+cert: add --tlsdisableautofill to prevent information leaks.
This adds in a new boolean flag that when set, prevents LND from writing the system hostname and network interface IPs to the TLS certificate. This will ensure privacy for those that don't want private IP addresses to be exposed on a public facing LND node.
2020-08-13 09:24:39 -05:00
b01947b7dc lnd: fix go fmt 2020-07-08 16:46:51 +08:00
8920e20cf7 cert: define ExtendedKeyUsage as required by macOS 10.15 2020-04-17 09:22:32 +02:00
83dcf95f92 cert+test: IsOutdated check for TLS files if IPs or DNS changed
This commit creates a new utility method IsOutdated that can be used to
check whether a TLS certificate mathces the extra IPs and domains given
in the lnd config.
2020-02-12 10:59:51 +01:00
d316107749 cert: extract IP and DNS parsing into methods 2020-02-12 10:59:51 +01:00
ca22001bab cert: add bufconn to TLS hostnames 2019-12-18 10:28:22 +01:00
dbbb169e06 lnd: use TLS code from cert package 2019-11-18 09:44:54 +01:00
b18698c321 cert: copy common TLS code from lnd to cert package 2019-11-14 10:23:40 +01:00