Skip to content

Conversation

@pranavjain97
Copy link
Contributor

@pranavjain97 pranavjain97 commented May 21, 2025

@pranavjain97 pranavjain97 force-pushed the WP-4352-setup-enclaved-bitgo-express branch from 46b3862 to 442c3ce Compare May 21, 2025 18:50
@pranavjain97 pranavjain97 requested review from a team, islamaminBitGo, lokesh-bitgo, mohammadalfaiyazbitgo and ranga-r2 and removed request for a team May 21, 2025 18:51
@pranavjain97 pranavjain97 changed the title feat: setup enclaved bitgo express with MBE feat: setup enclaved bitgo express with TLS May 21, 2025
@pranavjain97 pranavjain97 force-pushed the WP-4352-setup-enclaved-bitgo-express branch from ef5c5a1 to 1e7dbfd Compare May 21, 2025 19:53
@pranavjain97 pranavjain97 force-pushed the WP-4352-setup-enclaved-bitgo-express branch from 1e7dbfd to daaa741 Compare May 21, 2025 20:00
@pranavjain97 pranavjain97 force-pushed the WP-4352-setup-enclaved-bitgo-express branch 2 times, most recently from 0bbe17d to efe92c4 Compare May 21, 2025 21:32
@pranavjain97 pranavjain97 force-pushed the WP-4352-setup-enclaved-bitgo-express branch from efe92c4 to 00bdafa Compare May 21, 2025 21:36
@pranavjain97 pranavjain97 changed the title feat: setup enclaved bitgo express with TLS feat: setup enclaved bitgo express with mTLS support May 22, 2025
}

const fingerprint = clientCert.fingerprint256?.replace(/:/g, '').toUpperCase();
if (!fingerprint || !config.mtlsAllowedClientFingerprints?.includes(fingerprint)) {

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nice. this way our clients can use this in an even more secure way and restrict the certificates to ones they generate internally for usage only by express nodes


## License

MIT
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

do we have guidance/approval to use mit licesense ?

Copy link

@islamaminBitGo islamaminBitGo left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM overall, not seeing tests for mTLS setup with client and server certs and a constrained list of accepted certs by the server?

@pranavjain97 pranavjain97 merged commit d26c7cc into master May 22, 2025
3 checks passed
@pranavjain97 pranavjain97 deleted the WP-4352-setup-enclaved-bitgo-express branch May 22, 2025 21:33
@pranavjain97
Copy link
Contributor Author

LGTM overall, not seeing tests for mTLS setup with client and server certs and a constrained list of accepted certs by the server?

Yeah its only setup for dev/test env's rn. We can add those easily later

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants