Skip to content

grpc: Adjust the file permissions on mTLS private keys#6075

Merged
vincenzopalazzo merged 2 commits intoElementsProject:masterfrom
cdecker:202303-cln-grpc-cert-mode
Mar 24, 2023
Merged

grpc: Adjust the file permissions on mTLS private keys#6075
vincenzopalazzo merged 2 commits intoElementsProject:masterfrom
cdecker:202303-cln-grpc-cert-mode

Conversation

@cdecker
Copy link
Member

@cdecker cdecker commented Mar 7, 2023

The mTLS private key files should be user-readable only, so set the mode accordingly. Also contains a bit of a drive-by fix for deprecated fields in our own code, causing warnings.

Fixes #6064

@cdecker cdecker changed the title 202303 cln grpc cert mode grpc: Adjust the file permissions on mTLS private keys Mar 8, 2023
@cdecker cdecker force-pushed the 202303-cln-grpc-cert-mode branch 2 times, most recently from 0f638c5 to c991cee Compare March 8, 2023 14:54
Copy link
Collaborator

@vincenzopalazzo vincenzopalazzo left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ACK c991cee

cdecker added 2 commits March 11, 2023 12:49
Fixes ElementsProject#6064
Reported-by: denis2342 <@denis2342>

Changelog-Changed: grpc: The mTLS private keys are no longer group-readable
We should rather hand the annotation through to the user code, and
warn there.
@cdecker cdecker force-pushed the 202303-cln-grpc-cert-mode branch from c991cee to 60bace3 Compare March 11, 2023 11:50
@vincenzopalazzo vincenzopalazzo merged commit 7d7b2ab into ElementsProject:master Mar 24, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

gRPC certificates are world readable

2 participants