libp2p ACL (Certificate Authority)

Users and Developers go
1

Does libP2P support CA(Certificate Authority)?(For example, I want to use libP2P to create a coalition that requires an access mechanism to enter)

2

Libp2p does not support the CA system, but you can limit access to a swarm:

  1. You can configure a pre-shared key (https://pkg.go.dev/github.com/libp2p/go-libp2p?tab=doc#PrivateNetwork), limiting access to those with the same pre-shared key.
  2. You can implement a connection “gater” (https://pkg.go.dev/github.com/libp2p/go-libp2p?tab=doc#ConnectionGater) that filters peers by peer ID (assuming you have some list of allowed peer IDs).
1 Like
3

thank you. I have another question, how to generate the pre-shared key (pnet.PSK) ,which is the parameter in the PrivateNetwork.

4

If I use ConnectionGater, does it also prevent relays ?
I mean if node B is in allowed peers of Node A, can the below connection happen?
node B → Relay → node A

5

Does there any way for use to use CA system, or we can implements a go-libp2-tls which support CA system?

6

If you mean the CA system (for websites), that would be pointless. If you mean a system for refusing connections from untrusted peers:

  1. Users usually use pre-shared keys (private networks).
  2. You could implement a custom connection gater.
7

Thanks. And what do we need to do in libp2p if our pre-shared keys (private networks) is leaked? Do we need to restart all peers and give them a new pre-shared keys (private networks)?

8

Yes. A better approach would be to use a custom connection gater, but there’s no built-in support for this.