|
Title: ssl help! Post by: cnbtcnews on January 22, 2013, 02:45:29 PM what does it meaning?
Client setup Once the server is accepting https connections, to be secure you should make sure the client is actually connecting to the bitcoin server and not an attacker trying to hijack the connection. If you can, you should copy the server.cert certificate chain file to the client machine and use it to validate the OpenSSL connection. For example, in php you would call stream_context_create() with the 'verify_peer' and 'ca_file' options and then call stream_context_set_default(). If you can't validate using the server certificate, you should connect to the server using its IP address instead of its host name. I want to connet bitcoind througt ssl with PHP page. How can I do? Title: Re: ssl help! Post by: onpdm on January 23, 2013, 08:51:44 PM I set up a Bitcoind Server 2 weeks ago and switched to SSL connection, but I didn't need any configuration of client.
Just make the configuration with the OpenSSL on your server described in wiki and connect via PHPrpc with https. If you change your PHPrpc back to http, connection will be refused. Hope this is correct anyway... but it works. Title: Re: ssl help! Post by: BitcoinSuite on January 30, 2013, 05:25:22 PM I set up a Bitcoind Server 2 weeks ago and switched to SSL connection, but I didn't need any configuration of client. You should, the instructions above mention copying the cert so it is validated with the one on YOUR server. Title: Re: ssl help! Post by: kjj on January 31, 2013, 06:14:53 PM Yes, make sure that you set the client up to validate the certificate. If you skip this step, you might as well not be using SSL at all.
|