{"action":"opened","issue":{"url":"https://api.github.com/repos/alibaba/pouch/issues/802","repository_url":"https://api.github.com/repos/alibaba/pouch","labels_url":"https://api.github.com/repos/alibaba/pouch/issues/802/labels{/name}","comments_url":"https://api.github.com/repos/alibaba/pouch/issues/802/comments","events_url":"https://api.github.com/repos/alibaba/pouch/issues/802/events","html_url":"https://github.com/alibaba/pouch/issues/802","id":301405052,"number":802,"title":"[feature request] need ability to set tls name whitelist for client who can connect to pouch daemon","user":{"login":"yyb196","id":1502577,"avatar_url":"https://avatars1.githubusercontent.com/u/1502577?v=4","gravatar_id":"","url":"https://api.github.com/users/yyb196","html_url":"https://github.com/yyb196","followers_url":"https://api.github.com/users/yyb196/followers","following_url":"https://api.github.com/users/yyb196/following{/other_user}","gists_url":"https://api.github.com/users/yyb196/gists{/gist_id}","starred_url":"https://api.github.com/users/yyb196/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/yyb196/subscriptions","organizations_url":"https://api.github.com/users/yyb196/orgs","repos_url":"https://api.github.com/users/yyb196/repos","events_url":"https://api.github.com/users/yyb196/events{/privacy}","received_events_url":"https://api.github.com/users/yyb196/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-03-01T13:31:38Z","updated_at":"2018-03-01T13:31:38Z","closed_at":null,"author_association":"COLLABORATOR","body":"### Ⅰ. Issue Description\r\ncommon tls protection allows any client whose cert can be resolved by the pouchd, \r\nthink this case, we publish certs to john, mary and lucy, but we want a daemon only can be connected by john and mary. \r\nso we need more configuration to specify which name is allowed to access, maybe something like following:\r\n```\r\n--tls-authority=my_authority  specify only accept cert published by my_authority\r\n--tls-whitelist=john,mary   specify only clients who have cert with name john or mary are permit to connect to this daemon\r\n```\r\n\r\n### Ⅱ. Describe what happened\r\n\r\n\r\n### Ⅲ. Describe what you expected to happen\r\n\r\n\r\n### Ⅳ. How to reproduce it (as minimally and precisely as possible)\r\n\r\n1.\r\n2.\r\n3.\r\n\r\n### Ⅴ. Anything else we need to know?\r\n\r\n\r\n### Ⅵ. Environment:\r\n\r\n- pouch version (use `pouch version`):\r\n- OS (e.g. from /etc/os-release):\r\n- Kernel (e.g. `uname -a`):\r\n- Install tools:\r\n- Others:"}}
{"actor":{"display_login":"yyb196"}}