go-libp2p
go-libp2p copied to clipboard
libp2p
feat: make certificate validation / creation configurable
This enables creation of private LibP2P networks over QUIC. This is beneficial since QUIC does not support pnet #1432 and it also enables unique authentication schemes. It also enables peers to establish a chain of trust with each-other.
Can you explain how it enables Pnet? Looks like you'll run into this specific problem: https://github.com/libp2p/go-libp2p/issues/1432#issuecomment-1106666968
Can you explain how it enables Pnet? Looks like you'll run into this specific problem: #1432 (comment)
This doesn't directly implement the Pnet protocol. However it does enable the same use-case of being able to create a private network of LibP2P peers with a pre-shared key.
In its present form, allowing arbitrary TLS configuration, this will be too much maintenance burden. I am willing to review / maintain a solution that works for: https://github.com/libp2p/specs/issues/489
Note, the problem with signing certificates with psk is that you now have to protect the psk as well as all the TLS private keys that are produced, since compromising the signed certificate & the private key will allow anyone to join the private network. See: https://github.com/libp2p/go-libp2p/issues/1432#issuecomment-1106666968