Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add encryption and authentication to peers #494

Closed
interpretor opened this issue Nov 15, 2016 · 3 comments
Closed

Add encryption and authentication to peers #494

interpretor opened this issue Nov 15, 2016 · 3 comments

Comments

@interpretor
Copy link
Member

I would like to add encryption and authentication to the peers.
It is already mentioned in the 36/ZRE draft under the paragraph "Security".
As zyre uses czmq, I would do it similar to the example in ironhouse.c and save the certs of all peers in the cert storage.
Any advice from your side?

@wesyoung
Copy link
Contributor

wesyoung commented Nov 15, 2016

this is how we were starting to think about it at the python level:

zeromq/pyre#94

@hintjens laid out some examples but i've not had a chance to implement yet, but have started to think about with these points in mind... there are a few spots in czmq that require touching to deal with the auth part. i had gotten it to work with the basic username/password against the gossip socket (and the peers), crypto may be a little less trivial...

https://github.com/zeromq/czmq/compare/master...wesyoung:fix/auth?expand=1

is the way i've been testing the basic auth pieces (if only to highlight what may need touching, it may not be 100% accurate but might help...). it also depends on if you're using gossip, do you want that auth protected too, etc...

@wesyoung
Copy link
Contributor

i think this can be closed?

#550
#556

@bluca
Copy link
Member

bluca commented Sep 18, 2017

Yes - thanks!

@bluca bluca closed this as completed Sep 18, 2017
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants