archethic-foundation / archethic-foundation/archethic-node

AEWeb uses full certification chain

Open
#1,597 0 comments 0 reactions 0 assignees View on GitHub
web hosting
Dominant language
Elixir
Stars
82
Forks
24
PR merge metrics
No merged PRs in 30d

Description

### Is your feature request related to a problem?

A website deployed to AEWeb cannot provide its full SSL certification chain.
Because of that we usually provide the last chain part (certificate directly related to the domain name).

Some Webview implementations require the full cert chain (with intermediate certs) to perform the TLS handshake.

### Describe the solution you'd like

Add the management of full certs chain to aeweb.

- [ ] GitHub Action : handle full cert chain validation using [tls.createSecureContext](https://nodejs.org/api/tls.html#tlscreatesecurecontextoptions) `cert` array
- [ ] AENode : update cert/domain name matching

Contributor guide

Open the contributing guide

Research direction

Start by tracing the AEWeb GitHub Action's certificate validation and the AENode certificate/domain-name matching path; review Node.js tls.createSecureContext and its cert-array behavior. Done means full certificate chains are handled in both listed areas and Webview TLS handshakes can use the intermediate certificates.

Written by the indexing model from the issue text.

Assessment

Tech stack
elixir, github-actions, node.js
Domain
devops, security, web-dev
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.