-
Notifications
You must be signed in to change notification settings - Fork 858
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add TLS/mTLS options and configure the GraphQL HTTP service #7910
base: main
Are you sure you want to change the base?
Conversation
Signed-off-by: Bhanu Pulluri <bhanu.pulluri@kaleido.io>
Signed-off-by: Bhanu Pulluri <bhanu.pulluri@kaleido.io>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
overall looks good, just would like to not be adding (test) code that references ommers
@@ -0,0 +1,545 @@ | |||
/* | |||
* Copyright ConsenSys AG. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
newly added files should be Copyright contributors to Besu.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
* Copyright ConsenSys AG. | |
* Copyright contributors to Besu. |
Assertions.assertThat(redirectUrl).isNotNull(); | ||
final Request.Builder redirectBuilder = resp.request().newBuilder(); | ||
redirectBuilder.get(); | ||
// resp.body().close(); |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
residual commented line
} | ||
|
||
@Test | ||
public void ethGetUncleCountByBlockHash() throws Exception { |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
can this test use getBlockNumber or something more basic? PoW is deprecated so ommers might go away at some point
PR Description
Summary
The changes include the addition of command-line options to enable and configure TLS and mTLS for the GraphQL HTTP service.
Changes
New Command-Line Options:
--graphql-tls-enabled
: Enable TLS for the GraphQL HTTP service.--graphql-tls-keystore-file
: Path to the TLS keystore file.--graphql-tls-keystore-password-file
: Path to the file containing the password for the TLS keystore.--graphql-mtls-enabled
: Enable mTLS for the GraphQL HTTP service.--graphql-tls-truststore-file
: Path to the TLS truststore file.--graphql-tls-truststore-password-file
: Path to the file containing the password for the TLS truststore.Validation of Option Dependencies:
Testing
Documentation
CHANGELOG.md
to reflect the addition of new TLS options.Thanks for sending a pull request! Have you done the following?
doc-change-required
label to this PR if updates are required.Locally, you can run these tests to catch failures early:
./gradlew build
./gradlew acceptanceTest
./gradlew integrationTest
./gradlew ethereum:referenceTests:referenceTests