archethic-foundation / archethic-foundation/archethic-node
AEWeb uses full certification chain
- Dominant language
- Elixir
- Stars
- 82
- Forks
- 24
- PR merge metrics
- No merged PRs in 30d
Description
### Is your feature request related to a problem?
A website deployed to AEWeb cannot provide its full SSL certification chain.
Because of that we usually provide the last chain part (certificate directly related to the domain name).
Some Webview implementations require the full cert chain (with intermediate certs) to perform the TLS handshake.
### Describe the solution you'd like
Add the management of full certs chain to aeweb.
- [ ] GitHub Action : handle full cert chain validation using [tls.createSecureContext](https://nodejs.org/api/tls.html#tlscreatesecurecontextoptions) `cert` array
- [ ] AENode : update cert/domain name matching
Contributor guide
Research direction
Start by tracing the AEWeb GitHub Action's certificate validation and the AENode certificate/domain-name matching path; review Node.js tls.createSecureContext and its cert-array behavior. Done means full certificate chains are handled in both listed areas and Webview TLS handshakes can use the intermediate certificates.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- elixir, github-actions, node.js
- Domain
- devops, security, web-dev
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100