Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

about tls Two-Way Authentication for nsq #231

Closed
lazytooo opened this issue Jul 30, 2018 · 4 comments
Closed

about tls Two-Way Authentication for nsq #231

lazytooo opened this issue Jul 30, 2018 · 4 comments
Labels

Comments

@lazytooo
Copy link

lazytooo commented Jul 30, 2018

Thank you for checking my question.
I want to write a demo about tls Two-Way Authentication for nsq.
But When I read the Doc for nsq,I can't understand how to use Two-Way Authentication for nsq because it is too simple to tell me how to deal with this problem.
So can you help me or give me some proposal to deal with this problem?
the last, thank you very much
And this is my email address : [email protected]

@ploxiln
Copy link
Member

ploxiln commented Jul 30, 2018

What exact kind of two-way authentication do you want to do?

To validate that the client used a trusted tls client certificate, use the nsqd option -tls-root-ca-file with your own TLS certificate authority cert which you use to sign client certificates (which you also probably created yourself). This is a complicated topic, you'll have to google around for it.

To validate that the client user/password for publishing/consuming a topic/channel, see https://nsq.io/components/nsqd.html#auth

@lazytooo
Copy link
Author

oh,thank u very much.But a new question here,I read the Doc and find the IDENTIFY,right?And how to use the IDENTIFY,how to modify the IDENTIFY or the config file?

@ploxiln
Copy link
Member

ploxiln commented Jul 31, 2018

For the reader/consumer set AuthSecret in the Config ("Values can be set directly") and it will be included in the IDENTIFY

@lazytooo
Copy link
Author

lazytooo commented Aug 2, 2018

Do you have some Communication tool,like WeChat?you can send your account for my email address,and I want to show you my demo and deal with the problem,because so many interface in the nsq,and I can't find what I need.thanks a lot.And in the end ,when I deal my problem I want to collate an interface document for the nsq.It can convenient the people who want to use the nsq

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

3 participants