Hello,

Regarding the implementation of the SSL, currently I am planning to make 
secure connections to:

1. postgresql-server
2. redis
3. uswgi protocol
4. nginx

(1) Secure connection to postgresql-server has been done by @2stacks in on 
of the example[1], I am planning to implement that soon.

(2) & (3) redis and uswgi protocol don't seem to have a support for any 
native method for secure connections, all I could find was stunnel to 
secure the connections.
Something to note about stunnel is that it's distributed under GNU GPL 
version 2 or later with OpenSSL exception 
<https://www.stunnel.org/sdf_copying.html> but stunnel is not a community 
project.

(4) While researching about how to automatically renew the certificates on 
kubernetes, I found cert-manager[2] that can be installed from helm.
cert-manager looks like a good option to me.

Please review it and let me know your thoughts on it.


Thank You,
Ajay

---
Ref:
[1]: https://github.com/2stacks/freeradius-django
[2]: https://github.com/jetstack/cert-manager

-- 
You received this message because you are subscribed to the Google Groups 
"OpenWISP" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to