Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feature Request: Support blocklist fingerprints input by file #1018

Open
brad-defined opened this issue Nov 17, 2023 · 1 comment
Open

Feature Request: Support blocklist fingerprints input by file #1018

brad-defined opened this issue Nov 17, 2023 · 1 comment

Comments

@brad-defined
Copy link
Collaborator

Blocklists in the Nebula config are a list of cert fingerprints identifying certificates that should not be honored during handshakes.
Instead of only specifying the blocklist as a list of fingerprints from the Nebula config, implement a way to read the blocklist fingerprints from a file.

From Slack (https://nebulaoss.slack.com/archives/CRWJJM52B/p1700252974702429):
I think it will have to be our way of “deprovisioning” some certs and I don’t love the idea of having to programmatically modify config files just to add to the blocklist.

@3lorsin
Copy link

3lorsin commented Jul 7, 2024

+1

In my use case, almost all of my hosts are snowflakes. So, being able to push a "master" blocklist file that each client points to would be much easier than manually or programmatically modifying each individual config.

If this feature is added, an example file in the docs would be nice for explaining the formatting for multiple blocked keys.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants