TLS on AdminAPI

Questions
4

Hi @kctam,

Apologies I made a mistake - the TLS configuration for remote consoles is indeed slightly different than for in-process consoles. Something like the following should work:

participant1 {
      admin-api {
        address = localhost
        port = 5012
        tls {
          trust-collection-file = "./adminapitls/root.cert"
          client-cert = {
              cert-chain-file = "./adminapitls/client.cert"
              private-key-file = "./adminapitls/client.key"
            }
          }
        }
      ledger-api.port = 5011
      ledger-api.address = localhost
    }

I also added a note about this to the end of the TLS configuration section. Your understanding of the client-side/server-side for TLS in Canton is correct.

Best,
Arne