GeneralBots/botserver
2
1
Fork 0
Code Issues Pull requests Projects Releases 323 Packages Wiki Activity Actions

fix: Remove mTLS requirement from Vault config to fix health check failures

Browse source 
- Remove tls_client_ca_file from vault config in installer.rs (Linux and macOS)
- Remove tls_client_ca_file from vault config in bootstrap/mod.rs
- TLS encryption still enabled, just no client certificate required
- Health checks now work with simple -sk curl flags
This commit is contained in:
Rodrigo Rodriguez (Pragmatismo) 2026-01-09 10:33:11 -03:00
parent b674d85583
commit 6c904f7dc9
2 changed files with 0 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
src/core/bootstrap/mod.rs
View file

@ -2098,7 +2098,6 @@ listener "tcp" {
tls_disable = false tls_disable = false
tls_cert_file = "../../conf/system/certificates/vault/server.crt" tls_cert_file = "../../conf/system/certificates/vault/server.crt"
tls_key_file = "../../conf/system/certificates/vault/server.key" tls_key_file = "../../conf/system/certificates/vault/server.key"
tls_client_ca_file = "../../conf/system/certificates/ca/ca.crt"
} }
# API settings - use HTTPS # API settings - use HTTPS

2
src/core/package_manager/installer.rs
View file

@ -912,7 +912,6 @@ listener "tcp" {
tls_disable = false tls_disable = false
tls_cert_file = "{{CONF_PATH}}/system/certificates/vault/server.crt" tls_cert_file = "{{CONF_PATH}}/system/certificates/vault/server.crt"
tls_key_file = "{{CONF_PATH}}/system/certificates/vault/server.key" tls_key_file = "{{CONF_PATH}}/system/certificates/vault/server.key"
tls_client_ca_file = "{{CONF_PATH}}/system/certificates/ca/ca.crt"
} }
api_addr = "https://localhost:8200" api_addr = "https://localhost:8200"
@ -938,7 +937,6 @@ listener "tcp" {
tls_disable = false tls_disable = false
tls_cert_file = "{{CONF_PATH}}/system/certificates/vault/server.crt" tls_cert_file = "{{CONF_PATH}}/system/certificates/vault/server.crt"
tls_key_file = "{{CONF_PATH}}/system/certificates/vault/server.key" tls_key_file = "{{CONF_PATH}}/system/certificates/vault/server.key"
tls_client_ca_file = "{{CONF_PATH}}/system/certificates/ca/ca.crt"
} }
api_addr = "https://localhost:8200" api_addr = "https://localhost:8200"