OpenSSL (https) JSON-RPC connections

Gavin Andresen (OP)

Legendary

Offline

Activity: 1652
Merit: 2053

Chief Scientist

OpenSSL (https) JSON-RPC connections

October 11, 2010, 06:56:00 PM
Last edit: October 11, 2010, 07:08:40 PM by gavinandresen

SVN rev 166 (bitcoin version 0.3.13.4) implements secure incoming SSL JSON-RPC connections to bitcoind or bitcoin -server on Linux and OSX.

I've created a wiki page with detailed instructions on how to configure bitcoin.conf for SSL JSON-RPC connections.

SSL support is enabled at compile time with the USE_SSL #define, and is not enabled in the Windows makefiles because I'm told there are... issues... compiling full OpenSSL libraries on Windows (core bitcoin uses the openssl libcrypto library, this change requires the full libssl library).

How often do you get the chance to work on a potentially world-changing project?

1675820209

Hero Member

Offline

Posts: 1675820209

Ignore

1675820209

1675820209


	Report to moderator

There are several different types of Bitcoin clients. The most secure are full nodes like Bitcoin Core, which will follow the rules of the network no matter what miners do. Even if every miner decided to create 1000 bitcoins per block, full nodes would stick to the rules and reject those blocks.

Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.

1675820209

Hero Member

Offline

Posts: 1675820209

Ignore

1675820209


	Report to moderator

BioMike

Legendary

Offline

Activity: 1658
Merit: 1001

Re: OpenSSL (https) JSON-RPC connections

October 11, 2010, 08:03:22 PM

Nice.

jgarzik

Legendary

Offline

Activity: 1596
Merit: 1059

Re: OpenSSL (https) JSON-RPC connections

October 11, 2010, 11:16:09 PM

Quote from: gavinandresen on October 11, 2010, 06:56:00 PM

SSL support is enabled at compile time with the USE_SSL #define, and is not enabled in the Windows makefiles because I'm told there are... issues... compiling full OpenSSL libraries on Windows (core bitcoin uses the openssl libcrypto library, this change requires the full libssl library).

What are the issues?

FWIW, one can download mingw32-openssl from fedora, thereby obtaining portable (across Win32) binaries without all the work.

Jeff Garzik, Bloq CEO, former bitcoin core dev team; opinions are my own.
Visit bloq.com / metronome.io
Donations / tip jar: 1BrufViLKnSWtuWGkryPsKsxonV2NQ7Tcj

Gavin Andresen (OP)

Legendary

Offline

Activity: 1652
Merit: 2053

Chief Scientist

Re: OpenSSL (https) JSON-RPC connections

October 11, 2010, 11:29:24 PM

Quote from: jgarzik on October 11, 2010, 11:16:09 PM

What are the issues?

FWIW, one can download mingw32-openssl from fedora, thereby obtaining portable (across Win32) binaries without all the work.

I don't know what the issues are-- I do Mac/Linux these days (I don't do Windows). Does the precompiled fedora mingw32-openssl support ECSDA signatures? Can you give it a try and let us know if it works? (just add -DUSE_SSL to the Makefile and link with whatever libssl is called under mingw32)

How often do you get the chance to work on a potentially world-changing project?

slurch

Member

Offline

Activity: 70
Merit: 10

Re: OpenSSL (https) JSON-RPC connections

April 23, 2011, 01:26:42 AM

I hate to dredge this up after 6 months, but I'm trying to set this up right now...on my Windows 7 box. Sad

Has any progress been made that a summary noob such as myself might be able to make use of? The wiki has some of the pieces, but I'm stumped on this one. Thanks, guys.

Edit: No other pertinent threads on the topic doesn't bode well for my noobness, either. Tongue

Donations accepted at: 1AXKzVc1tTmfC6VkWwBNSzKqThqhwsC5mY
For what, I have no idea...

unfinishe

Full Member

Offline

Activity: 126
Merit: 100

Re: OpenSSL (https) JSON-RPC connections

May 24, 2011, 06:28:40 PM
Last edit: May 24, 2011, 09:45:16 PM by unfinishe

Well, I have managed to compile the latest source on Windows XP SP3 with ssl support just fine by editing makefile.mingw:

line 28:

Code:

-l db_cxx \
-l eay32

Code:

-l db_cxx \
-l ssl \
-l eay32

and line 33:

Code:

DEFS=-DWIN32 -D__WXMSW__ -D_WINDOWS -DNOPCH

Code:

DEFS=-DWIN32 -D__WXMSW__ -D_WINDOWS -DNOPCH -DUSE_SSL

and then following the instructions here: http://forum.bitcoin.org/index.php?topic=5851.

Check out the results from my Bitcoin Survey Project!
https://bitcointalk.org/index.php?topic=88927.0

Pages: [1]

Bitcoin Forum > Bitcoin > Development & Technical Discussion > OpenSSL (https) JSON-RPC connections

« previous topic next topic »