Allow TLS connections in the Tornado TCP transport
Closed this issue · 6 comments
thatch45 commented
The tcp transport just uses tcp connections, we should be able to allow for the master to listen over a tls socket, we would still keep all of the background components for auth and crypt, just allow minions to connect via a tls connection.
DmitryKuzmenko commented
@thatch45 I've implemented TLS support in tcp transport for master-minion communication. The ssl
module also provides a number of SSL/TLS options: CA certificate validation, specifying the protocol version and choosing the allowed ciphers. Do we need these options support in salt configuration?
thatch45 commented
Good question. I will do some research and get back to you.
DmitryKuzmenko commented
Thank you!
DmitryKuzmenko commented
Updated the implementation. Still have to add the docs.
DmitryKuzmenko commented
Added documentation.
DmitryKuzmenko commented
Added config examples. Finished.