Introduction
To secure the controller/agent communication, the agent was built with SSL client certificate support.
Configuring the agent.
Open agent2.toml file (located under /opt/jumpscale8/apps/agent2) and change the following:
- change
main.agent_controllersto `["https://localhost/controller/"] - set
security.client_certificateto/path/to/generated/client-testagent.crt - set
security.client_certificate_keyto/path/to/generated/client-testagent.key - set
security.certificate_authorityto/path/to/generated/server.crt(This is only needed because we are using a self-signed certificate so we all telling the agent to trust this certificate, if this is not set agent will refuse to connect to the controller because it doesn't provide a trusted certificate)
Restart the agent.