有没有人用本地节点配置Galleon或TezBox？

Question

有没有人用本地节点配置Galleon或TezBox？

- 7
- 239 2019-03-22
在将这两个钱包之一连接到同一台机器上的本地节点时,我遇到了一些麻烦.正确的端口正在侦听(netstat -tulpn).TLS的设置看起来不错,例如,在戳tezos节点时我得到了正确的响应 :

./tezos-client -port 1234 -S get balance for xyz

在config.json中,我尝试了不同形式的" listen-addr"(在" rpc"和"p2p"中均使用),127.0.0.1,本地主机, :: 1,0.0.0.0 +端口号,似乎没有任何作用.

也许是自签名TLS证书或文件的位置, 有什么主意吗?
I am having some troubles connecting either one of these two wallets to a local node on the same machine. The correct ports are listening (netstat -tulpn). The setup of TLS looks good, for example I get the correct response when poking the tezos node with:

./tezos-client -port 1234 -S get balance for xyz

In config.json I tried different flavors of "listen-addr" (both in "rpc" and "p2p"), 127.0.0.1, localhost, ::1, 0.0.0.0 + port numbers, nothing seems to work.

Perhaps it is the self-signed TLS certificate or the location of the files, any idea?
node wallets

- 请发布答案作为答案,而不是在您的问题内！这将帮助mods理解问题已被实际回答,您也可以将其标记为有帮助mods.谢谢
  
  Please post the answer as an answer instead of inside your question! It will help mods understand that the question has actually been answered and you can also mark it as such which will help mods. Thanks
  - 0
  - 2019-04-15
  - Ezy
- 对此表示歉意.我同意答案应该已经发布为评论.这是我想要做的,直到我在评论框中阅读以下文本:"使用评论来答复其他用户或将更改通知他们.如果要添加, 新信息,请编辑您的信息,而不要发表评论."
  
  apologies for the confusion. I agree the answer should have been posted as a comment. This is what I wanted to do until I read the following text in the comment box: "Use comments to reply to other users or notify them of changes. If you are adding new information, edit your post instead of commenting."
  - 0
  - 2019-04-16
  - TEZOS on the ROAD
- 抱歉,您还是错了.您应该将答案以"答案"的形式发布,而不是作为评论,也不要在问题本身中发布.如果我所说的内容不清楚,请告诉我.
  
  Sorry you still got it wrong. Your should please post the answer as an “ANSWER”, not as a comment and not in the question itself. Please let me know if something is not clear in what i am saying.
  - 0
  - 2019-04-16
  - Ezy

1 个回答

投票数

TEZOS on the ROAD · Answer 1 · 2019-04-17

2

2019-04-17

解决方案(对于TezBox网络版本)

不像人们想象的那样直观.在具有运行Tezos节点的Fedora OS的计算机上已完成以下操作.
首先,作为用户创建证书和密钥:

 openssl req -x509 -newkey rsa:2048 -nodes -keyout server.key -new -out server.crt -subj /CN=localhost -reqexts SAN -extensions SAN -config <(cat /etc/pki/tls/openssl.cnf <(printf '[SAN]\nsubjectAltName=DNS:localhost,DNS:127.0.0.1,IP:127.0.0.1')) -sha256 -days 3650

以root用户身份安装node.js:

 dnf install nodejs

(以上命令还将安装npm(js程序包管理器))
以根用户身份安装本地网络服务器:

  npm install -g local-web-server

以用户身份运行本地网络服务器:

   ws --https --hostname 127.0.0.1 --key /home/<user>/server.key --cert /home/<user>/server.crt --rewrite '/chains/* ->http://localhost:8732/chains/$1' -v

该命令假定证书和密钥在/home/＆lt; user> 中,Tezos RPC端口为8732,默认端口127.0.0.1为8000(标志-v用于详细输出).

使用Chrome连接到 https://127.0.0.1:8000 ,然后单击继续进行127.0. 0.1(不安全)
然后按f12键,然后按照"查看证书"->"详细信息"->"导出"并将证书另存为PKCS#7证书(例如,输出名称localhost).
确保已安装nss-tools(对于其他Linux发行版,它称为libnss3-tools).
在保存本地文件的位置,作为用户类型:

   certutil -d sql:/home/max/.pki/nssdb -A -t "P,," -n localhost -i localhost

重新启动Chrome,现在连接到 https://127.0.0.1:8000 不应显示任何警告.

转到 https://wallet.tezbox.com 并打开现有/新的钱包,然后转到设置(右上杆)并将 https://rpc.tezrpc.me 替换为 https://127.0.0.1:8000

[附录19年4月10日]还可以在Opera浏览器中使用.不用使用F12进入开发人员模式,而是键入Ctrl + Shift + I,然后转到安全性->查看证书,其余相同.使用Opera将TezBox连接到本地节点的绿灯亮起.

SOLUTION (for TezBox web version)

Not as intuitive as one can imagine. The following has been done on a machine with Fedora OS running a Tezos node.
First as a user create a certificate and a key:

openssl req -x509 -newkey rsa:2048 -nodes -keyout server.key -new -out server.crt -subj /CN=localhost -reqexts SAN -extensions SAN -config <(cat /etc/pki/tls/openssl.cnf <(printf '[SAN]\nsubjectAltName=DNS:localhost,DNS:127.0.0.1,IP:127.0.0.1')) -sha256 -days 3650

Install node.js as root:

dnf install nodejs

(the above command will install also npm (js package manager))
install local-web-server, as root:

 npm install -g local-web-server

run local-web-server as a user:

  ws --https --hostname 127.0.0.1 --key /home/<user>/server.key --cert /home/<user>/server.crt --rewrite '/chains/* ->http://localhost:8732/chains/$1' -v

the command assumes that the certificate and the key are in /home/<user>, the Tezos RPC port is 8732, the default port for 127.0.0.1 is 8000 (the flag -v is for verbose output).

Use Chrome to connect to https://127.0.0.1:8000 and click on proceed to 127.0.0.1 (unsafe)
then type the f12 key and follow "view certificate" -> "details" -> "export" and save the certificate as PKCS #7 Certificates (e.g. output name localhost).
Make sure that nss-tools is installed (for other linux distros it is called libnss3-tools).
From the location where the localhost file has been saved, as a user type:

  certutil -d sql:/home/max/.pki/nssdb -A -t "P,," -n localhost -i localhost

Restart Chrome, now connecting to https://127.0.0.1:8000 should not show any warning.

Go to https://wallet.tezbox.com and open an existing/new wallet then go to setting (upper right rod) and replace https://rpc.tezrpc.me with https://127.0.0.1:8000

[addendum 04/10/19] It also works with Opera browser. Instead of using F12 to enter the developers mode, type Ctrl+Shift+I then go to security -> view certificate, the rest is the same. Green light for TezBox connected to a local node using Opera.