@distrohelena/canton-typescript-sdk 0.1.19 → 0.1.20

package/node/start-local.sh

@@ -244,6 +244,62 @@ services:
       - "$server_certificate_path:/app/localnet-tls/server.crt:ro"
       - "$server_key_path:/app/localnet-tls/server.key:ro"
       - "$ca_certificate_path:/app/localnet-tls/ca.crt:ro"
+  splice:
+    volumes:
+      - "$ca_certificate_path:/app/localnet-tls/ca.crt:ro"
+    environment:
+      - |
+        ADDITIONAL_CONFIG_LOCALNET_TLS=
+EOF
+  for participant in app-provider app-user sv; do
+    case "$participant" in
+      app-provider) profile="$APP_PROVIDER_PROFILE" ;;
+      app-user) profile="$APP_USER_PROFILE" ;;
+      sv) profile="$SV_PROFILE" ;;
+    esac
+    if [[ "$profile" == "off" ]]; then
+      continue
+    fi
+    if [[ "$participant" == "sv" ]]; then
+      cat >> "$compose_file" <<'EOF'
+          canton.validator-apps.sv-validator_backend.participant-client {
+            admin-api.tls.trust-collection-file = "/app/localnet-tls/ca.crt"
+            ledger-api.client-config.tls.trust-collection-file = "/app/localnet-tls/ca.crt"
+          }
+          canton.scan-apps.scan-app.participant-client {
+            admin-api.tls.trust-collection-file = "/app/localnet-tls/ca.crt"
+            ledger-api.client-config.tls.trust-collection-file = "/app/localnet-tls/ca.crt"
+          }
+          canton.sv-apps.sv.participant-client {
+            admin-api.tls.trust-collection-file = "/app/localnet-tls/ca.crt"
+            ledger-api.client-config.tls.trust-collection-file = "/app/localnet-tls/ca.crt"
+          }
+EOF
+    else
+      cat >> "$compose_file" <<EOF
+          canton.validator-apps.${participant}-validator_backend.participant-client {
+            admin-api.tls.trust-collection-file = "/app/localnet-tls/ca.crt"
+            ledger-api.client-config.tls.trust-collection-file = "/app/localnet-tls/ca.crt"
+          }
+EOF
+    fi
+  done
+  cat >> "$compose_file" <<EOF
+  pqs-app-provider:
+    environment:
+      SCRIBE_SOURCE_LEDGER_TLS_CAFILE: /app/localnet-tls/ca.crt
+    volumes:
+      - "$ca_certificate_path:/app/localnet-tls/ca.crt:ro"
+  pqs-app-user:
+    environment:
+      SCRIBE_SOURCE_LEDGER_TLS_CAFILE: /app/localnet-tls/ca.crt
+    volumes:
+      - "$ca_certificate_path:/app/localnet-tls/ca.crt:ro"
+  pqs-sv:
+    environment:
+      SCRIBE_SOURCE_LEDGER_TLS_CAFILE: /app/localnet-tls/ca.crt
+    volumes:
+      - "$ca_certificate_path:/app/localnet-tls/ca.crt:ro"
 EOF
   export LOCALNET_TLS_COMPOSE_FILE="$compose_file"
   export LOCALNET_TLS_FRAGMENT_FILE="$tls_fragment_file"
@@ -642,6 +698,19 @@ EOF
     done
   } > "$splice_config_file"
 
+  if [[ "$(resolve_tls_enabled)" == "1" ]]; then
+    local index
+    for ((index = 1; index <= count; index++)); do
+      cat >> "$splice_config_file" <<EOF
+canton.validator-apps.extra-${index}-validator_backend.participant-client {
+  admin-api.tls.trust-collection-file = "/app/localnet-tls/ca.crt"
+  ledger-api.client-config.tls.trust-collection-file = "/app/localnet-tls/ca.crt"
+}
+
+EOF
+    done
+  fi
+
   {
     cat <<'EOF'
 volumes:
@@ -731,8 +800,20 @@ EOF
       SCRIBE_TARGET_POSTGRES_USERNAME: \${DB_USER}
       SCRIBE_TARGET_POSTGRES_PASSWORD: \${DB_PASSWORD}
       SCRIBE_CONFIG: /onboarding/extra-${index}-pqs.conf
+EOF
+    if [[ "$(resolve_tls_enabled)" == "1" ]]; then
+      cat <<'EOF'
+      SCRIBE_SOURCE_LEDGER_TLS_CAFILE: /app/localnet-tls/ca.crt
+EOF
+    fi
+    cat <<EOF
     volumes:
       - onboarding:/onboarding
+EOF
+    if [[ "$(resolve_tls_enabled)" == "1" ]]; then
+      printf '      - "%s:/app/localnet-tls/ca.crt:ro"\n' "${LOCALNET_TLS_CA_CERT_PATH}"
+    fi
+    cat <<'EOF'
     command:
       - pipeline
       - ledger

package/node/test-start-local.sh

@@ -412,11 +412,22 @@ if grep -Fq 'canton.participants.app-user.ledger-api.tls {' "$tmpdir/tls/canton-
 fi
 assert_file_contains_text "$tmpdir/tls/compose-localnet.yaml" '/app/localnet-tls/server.key:ro'
 assert_file_contains_text "$tmpdir/tls/compose-localnet.yaml" '/app/localnet-tls/ca.crt:ro'
+assert_file_contains_text "$tmpdir/tls/compose-localnet.yaml" 'ADDITIONAL_CONFIG_LOCALNET_TLS='
+assert_file_contains_text "$tmpdir/tls/compose-localnet.yaml" 'admin-api.tls.trust-collection-file = "/app/localnet-tls/ca.crt"'
+assert_file_contains_text "$tmpdir/tls/compose-localnet.yaml" 'ledger-api.client-config.tls.trust-collection-file = "/app/localnet-tls/ca.crt"'
+assert_file_contains_text "$tmpdir/tls/compose-localnet.yaml" 'SCRIBE_SOURCE_LEDGER_TLS_CAFILE: /app/localnet-tls/ca.crt'
+if grep -Fq 'canton.validator-apps.app-user-validator_backend.participant-client' "$tmpdir/tls/compose-localnet.yaml"; then
+  echo "unexpected client TLS configuration for inactive app-user participant" >&2
+  exit 1
+fi
 assert_file_mode "$tmpdir/tls/server.key" 600
 assert_file_mode "$tmpdir/tls/ca.key" 600
 run_case $'.PHONY: start\nstart:\n' 'stub docker compose -f compose.yaml -f '"$tmpdir"'/quickstart/docker/modules/localnet/compose.yaml -f '"$tmpdir"'/quickstart/docker/modules/splice-onboarding/compose.yaml -f '"$tmpdir"'/quickstart/docker/modules/pqs/compose.yaml --env-file .env --env-file .env.local --env-file '"$tmpdir"'/quickstart/docker/modules/localnet/compose.env --env-file '"$tmpdir"'/quickstart/docker/modules/localnet/env/common.env --env-file '"$tmpdir"'/quickstart/docker/modules/pqs/compose.env --profile app-provider --profile pqs-app-provider --profile pqs-sv -f '"$tmpdir"'/generated/compose-extra-participants.yaml --env-file '"$tmpdir"'/generated/extra-participants.env -f '"$tmpdir"'/tls/compose-localnet.yaml down -v --remove-orphans' shared-secret default 2 '' '' 0 1
 assert_file_contains_text "$tmpdir/generated/additional-config.extra-participants.conf" 'canton.participants.extra-1.ledger-api.tls {'
 assert_file_contains_text "$tmpdir/generated/additional-config.extra-participants.conf" 'canton.participants.extra-2.admin-api.tls {'
+assert_file_contains_text "$tmpdir/generated/additional-config.extra-validators.conf" 'canton.validator-apps.extra-1-validator_backend.participant-client {'
+assert_file_contains_text "$tmpdir/generated/additional-config.extra-validators.conf" 'admin-api.tls.trust-collection-file = "/app/localnet-tls/ca.crt"'
+assert_file_contains_text "$tmpdir/generated/compose-extra-participants.yaml" 'SCRIBE_SOURCE_LEDGER_TLS_CAFILE: /app/localnet-tls/ca.crt'
 
 mkdir -p "$tmpdir/supplied"
 openssl genrsa -out "$tmpdir/supplied/ca.key" 2048 >/dev/null 2>&1

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@distrohelena/canton-typescript-sdk",
-    "version": "0.1.19",
+    "version": "0.1.20",
     "license": "Apache-2.0",
     "type": "module",
     "main": "./dist/index.js",