Skip to content

Make setting up private CA certificates easier #525

@hardillb

Description

@hardillb

Description

Suggest adding a default empty chain.pem to /opt/flowfuse-device/

And configuring both NSSM and Linux services to export the NODE_EXTRA_CA_CERTS=/opt/flowfuse-device/chain.pem environment variable by default.

This mean users would only need to overwrite the file with their CA chain to enable support.

I would like to do this for the flowfuse-device-agent shell scripts as well, but they are generated by npm from the package.json file and I don't think it's possible to inject env vars into them.

Requested By

  • Customer name and/or link to HubSpot contact

Metadata

Metadata

Assignees

No one assigned

    Labels

    needs-triageNeeds looking at to decide what to dotype:featureNew feature or request that needs to be turned into Epic/Story details

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions