Skip to content

Commit

Permalink
Merge pull request #50 from atolab/doc/tls
Browse files Browse the repository at this point in the history
doc(tls): TLS with scouting & protocol whitelisting
  • Loading branch information
Mallets authored May 29, 2024
2 parents 19b74c1 + ed0fdc4 commit 0586bea
Showing 1 changed file with 22 additions and 0 deletions.
22 changes: 22 additions & 0 deletions content/docs/manual/tls.md
Original file line number Diff line number Diff line change
Expand Up @@ -104,6 +104,28 @@ Let's assume that the above configurations are then saved with the name _peer.js

---

## TLS with Scouting :warning:

Zenoh provides a [scouting mechanism](../../getting-started/deployment/#scouting) that allows peers to discover other neighboring peers automatically.

By default, this feature is enabled and attempts to establish connections with other peers **using all Zenoh-supported protocols** (not just TLS).

To ensure that all connections are established using TLS, you can configure the protocols filter as shown below:

```json
{
"transport": {
"link": {
"protocols": ["tls"]
}
}
}
```

The `protocols` configuration field specifies which protocols Zenoh should whitelist for accepting and opening sessions. If this field is not configured, Zenoh will automatically whitelist all supported protocols.

---

## Mutual authentication (mTLS)

In order to enable mutual authentication, we'll need two sets of keys and certificates, one for the "server" and one for the "client". These sets of keys and certificates can be generated as explained [in the appendix section below](#appendix-tls-certificates-creation).
Expand Down

0 comments on commit 0586bea

Please sign in to comment.