Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

streamer: Sign TLS cert with validator identity key #5

Closed
wants to merge 2 commits into from

Conversation

riptl
Copy link

@riptl riptl commented Jan 27, 2022

This allows the validator to reuse it's identity key to self-sign the TPU server certificate.

  • streamer: Adds gossip IP address as X.509 subject alternative name
  • streamer: Signs cert using validator identity key

There's a security concern with signing certs directly with the validator key.
We have to make sure that this signing process can never be used to forge consensus message or transaction signatures.


In the future, TPU clients could serve a client cert using the same mechanism too.
This would hopefully allow the validator to apply basic QoS based on node identity, e.g. giving identity keys that have been observed in gossip longer more TPU bandwidth.

@sakridge sakridge force-pushed the tpu-quic branch 28 times, most recently from a956697 to 1d27326 Compare February 3, 2022 15:37
@sakridge sakridge force-pushed the tpu-quic branch 5 times, most recently from b50c617 to c7a9629 Compare February 7, 2022 12:57
@riptl riptl closed this Jun 17, 2022
sakridge pushed a commit that referenced this pull request Mar 14, 2024
* Update README.md

* ci: update CodeCov report link

* ci: update github pr link

* ci: rename secondary pipeline

* replace org name in .mergify

* update channel info link

* update dependabot pr link

* use anza docker image

* delete travis

---------

Co-authored-by: Will Hickey <will.hickey@solana.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants