Add mutual-TLS to the gossip link

Optional [gossip.tls] wraps the peer link in TLS: each node presents a
certificate and requires the peer to present one signed by the configured
CA. scripts/gen-certs.sh builds a CA and node certs.
This commit is contained in:
Jean Chevronnet 2026-07-12 07:31:16 +00:00
parent cc0265548f
commit 0af7f10c3d
No known key found for this signature in database
5 changed files with 434 additions and 19 deletions

View file

@ -18,3 +18,5 @@ subtle = "2"
anyhow = "1"
tracing = "0.1"
tracing-subscriber = { version = "0.3", features = ["env-filter"] }
tokio-rustls = "0.26.4"
rustls-pemfile = "2.2.0"