rpc_client.py: Allow for optional SSL_Context #6848
Nico-VanHaaster
started this conversation in
Ideas
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
-
Implementing the pools protocol shows us that we must have the Private \ Public Keys available on the current pool server. As the pool server will be the central attack vector we are looking at ways to reduce the capabilities for an attacker to gain unauthorised access to the nodes which are running the pool wallets.
In the current design the private \ public keys must be stored in a physical file based on the config.yaml file path. This of course is easily accessed by an unauthorized actor.
Now one could construct the class themselves however from our understanding the only reliance on the config.yaml file is to establish the ssl_context. I am not that great at python however the change below would allow integrators to create an RPC client without the need for the files to be stored on the actual file system.
Ideally the pool server would have no reliance on any physical files that contain any sensitive data to operate.
Welcome thoughts.
Beta Was this translation helpful? Give feedback.
All reactions