Skip to content

Commit b63fb48

Browse files
authored
Update README.md
1 parent eccefaa commit b63fb48

File tree

1 file changed

+24
-1
lines changed

1 file changed

+24
-1
lines changed

README.md

+24-1
Original file line numberDiff line numberDiff line change
@@ -47,7 +47,7 @@ RPC transport is the fastest transport and the protocol is consists of binary an
4747

4848
conf/server.config.yml
4949

50-
```
50+
```yml
5151
!ServerConfiguration
5252
transports:
5353
- !org.audit4j.microservice.transport.thrift.ThriftTransportServer
@@ -64,6 +64,29 @@ transports:
6464
6565
```thrift --gen <language> api.thrift```
6666

67+
#### SSL Configurations
68+
69+
Securing Audit traffic is only recommended if the traffic is exposed as a public service. Using below steps, RPC communication can be secured via SSL.
70+
71+
1. Creating key store for server
72+
```keytool -genkeypair -alias certificatekey -keyalg RSA -validity 7 -keystore keystore.jks```
73+
74+
2. Export certificate
75+
```keytool -export -alias certificatekey -keystore keystore.jks -rfc -file cert.cer```
76+
77+
3. Creating trust store for client
78+
```keytool -import -alias certificatekey -file cert.cer -keystore truststore.jks```
79+
80+
4. Configure RPC transport
81+
82+
```yml
83+
!ServerConfiguration
84+
transports:
85+
- !org.audit4j.microservice.transport.thrift.ThriftTransportServer
86+
secureServer = true
87+
secureKeyStore = conf/trust/keystore.jks
88+
secureKeyPassword = 123456 #Given password while creating the keystore
89+
```
6790

6891
### Web Socket transport
6992

0 commit comments

Comments
 (0)