a73d698e30
Currently, the beacon node has no ability to serve the HTTP API over TLS. Adding this functionality would be helpful for certain use cases, such as when you need a validator client to connect to a backup beacon node which is outside your local network, and the use of an SSH tunnel or reverse proxy would be inappropriate. ## Proposed Changes - Add three new CLI flags to the beacon node - `--http-enable-tls`: enables TLS - `--http-tls-cert`: to specify the path to the certificate file - `--http-tls-key`: to specify the path to the key file - Update the HTTP API to optionally use `warp`'s [`TlsServer`](https://docs.rs/warp/0.3.1/warp/struct.TlsServer.html) depending on the presence of the `--http-enable-tls` flag - Update tests and docs - Use a custom branch for `warp` to ensure proper error handling ## Additional Info Serving the API over TLS should currently be considered experimental. The reason for this is that it uses code from an [unmerged PR](https://github.com/seanmonstar/warp/pull/717). This commit provides the `try_bind_with_graceful_shutdown` method to `warp`, which is helpful for controlling error flow when the TLS configuration is invalid (cert/key files don't exist, incorrect permissions, etc). I've implemented the same code in my [branch here](https://github.com/macladson/warp/tree/tls). Once the code has been reviewed and merged upstream into `warp`, we can remove the dependency on my branch and the feature can be considered more stable. Currently, the private key file must not be password-protected in order to be read into Lighthouse.
42 lines
1.3 KiB
TOML
42 lines
1.3 KiB
TOML
[package]
|
|
name = "beacon_node"
|
|
version = "2.0.0"
|
|
authors = ["Paul Hauner <paul@paulhauner.com>", "Age Manning <Age@AgeManning.com"]
|
|
edition = "2018"
|
|
|
|
[lib]
|
|
name = "beacon_node"
|
|
path = "src/lib.rs"
|
|
|
|
[dev-dependencies]
|
|
node_test_rig = { path = "../testing/node_test_rig" }
|
|
|
|
[features]
|
|
write_ssz_files = ["beacon_chain/write_ssz_files"] # Writes debugging .ssz files to /tmp during block processing.
|
|
|
|
[dependencies]
|
|
eth2_config = { path = "../common/eth2_config" }
|
|
beacon_chain = { path = "beacon_chain" }
|
|
types = { path = "../consensus/types" }
|
|
store = { path = "./store" }
|
|
client = { path = "client" }
|
|
clap = "2.33.3"
|
|
slog = { version = "2.5.2", features = ["max_level_trace", "release_max_level_trace"] }
|
|
dirs = "3.0.1"
|
|
directory = {path = "../common/directory"}
|
|
futures = "0.3.7"
|
|
environment = { path = "../lighthouse/environment" }
|
|
task_executor = { path = "../common/task_executor" }
|
|
genesis = { path = "genesis" }
|
|
eth2_network_config = { path = "../common/eth2_network_config" }
|
|
eth2_libp2p = { path = "./eth2_libp2p" }
|
|
serde = "1.0.116"
|
|
clap_utils = { path = "../common/clap_utils" }
|
|
hyper = "0.14.4"
|
|
lighthouse_version = { path = "../common/lighthouse_version" }
|
|
hex = "0.4.2"
|
|
slasher = { path = "../slasher" }
|
|
monitoring_api = { path = "../common/monitoring_api" }
|
|
sensitive_url = { path = "../common/sensitive_url" }
|
|
http_api = { path = "http_api" }
|