Commit b63fb48 1 parent eccefaa commit b63fb48 Copy full SHA for b63fb48
File tree 1 file changed +24
-1
lines changed
1 file changed +24
-1
lines changed Original file line number Diff line number Diff line change @@ -47,7 +47,7 @@ RPC transport is the fastest transport and the protocol is consists of binary an
47
47
48
48
conf/server.config.yml
49
49
50
- ```
50
+ ``` yml
51
51
!ServerConfiguration
52
52
transports :
53
53
- !org.audit4j.microservice.transport.thrift.ThriftTransportServer
@@ -64,6 +64,29 @@ transports:
64
64
65
65
` ` ` thrift --gen <language> api.thrift```
66
66
67
+ # ### SSL Configurations
68
+
69
+ Securing Audit traffic is only recommended if the traffic is exposed as a public service. Using below steps, RPC communication can be secured via SSL.
70
+
71
+ 1. Creating key store for server
72
+ ` ` ` keytool -genkeypair -alias certificatekey -keyalg RSA -validity 7 -keystore keystore.jks` ` `
73
+
74
+ 2. Export certificate
75
+ ` ` ` keytool -export -alias certificatekey -keystore keystore.jks -rfc -file cert.cer` ` `
76
+
77
+ 3. Creating trust store for client
78
+ ` ` ` keytool -import -alias certificatekey -file cert.cer -keystore truststore.jks` ` `
79
+
80
+ 4. Configure RPC transport
81
+
82
+ ` ` ` yml
83
+ !ServerConfiguration
84
+ transports:
85
+ - !org.audit4j.microservice.transport.thrift.ThriftTransportServer
86
+ secureServer = true
87
+ secureKeyStore = conf/trust/keystore.jks
88
+ secureKeyPassword = 123456 #Given password while creating the keystore
89
+ ` ` `
67
90
68
91
# ## Web Socket transport
69
92
You can’t perform that action at this time.
0 commit comments