You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
31 lines
1.1 KiB
31 lines
1.1 KiB
import fs from 'fs'
|
|
import grpc from 'grpc'
|
|
import config from '../config'
|
|
|
|
// Default is ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384
|
|
// https://github.com/grpc/grpc/blob/master/doc/environment_variables.md
|
|
//
|
|
// Current LND cipher suites here:
|
|
// https://github.com/lightningnetwork/lnd/blob/master/lnd.go#L80
|
|
//
|
|
// We order the suites by priority, based on the recommendations provided by SSL Labs here:
|
|
// https://github.com/ssllabs/research/wiki/SSL-and-TLS-Deployment-Best-Practices#23-use-secure-cipher-suites
|
|
process.env.GRPC_SSL_CIPHER_SUITES =
|
|
process.env.GRPC_SSL_CIPHER_SUITES ||
|
|
[
|
|
'ECDHE-ECDSA-AES128-GCM-SHA256',
|
|
'ECDHE-ECDSA-AES256-GCM-SHA384',
|
|
'ECDHE-ECDSA-AES128-CBC-SHA256',
|
|
'ECDHE-ECDSA-CHACHA20-POLY1305'
|
|
].join(':')
|
|
|
|
const walletUnlocker = (rpcpath, host) => {
|
|
const lndConfig = config.lnd()
|
|
const lndCert = fs.readFileSync(lndConfig.cert)
|
|
const credentials = grpc.credentials.createSsl(lndCert)
|
|
const rpc = grpc.load(lndConfig.lightningRpc)
|
|
|
|
return new rpc.lnrpc.WalletUnlocker(host, credentials)
|
|
}
|
|
|
|
export default walletUnlocker
|
|
|