v0.9.0
The TLS setup has been changed a bit to make it more flexible.
The only mandatory values with CACHE_TLS=true
are now:
CACHE_TLS_SERVER_CERT
with new default: tls/redhac.cert-chain.pemCACHE_TLS_SERVER_KEY
with new default: tls/redhac.key.pem
While the following ones are now optional and do not have a default anymore:CACHE_TLS_CLIENT_CERT
CACHE_TLS_CLIENT_KEY
CACHE_TLS_CA_SERVER
CACHE_TLS_CA_CLIENT
This makes it possible to use redhac
with TLS without providing a private CA file, which you
would never need, if you certificates can be validated on system level anyway already. Also, the
mTLS setup is now optional with this change.
Additionally, the TLS certificate generation in the Readme and Docs have been updated and use
Nioca for this task now, which is a lot more comfortable.
The test TLS certificates are checked into git as well for a faster start and evaluation.
Do not use them in production!