From fad11bc3efe67a86988422704c86cdb0bf2c1c50 Mon Sep 17 00:00:00 2001
From: Alex Wood <3380252+alexwood@users.noreply.github.com>
Date: Wed, 31 May 2023 11:46:14 +0100
Subject: [PATCH] add tls support for FFMT client to that evmconnect client
 mode can use it

Signed-off-by: Alex Wood <3380252+alexwood@users.noreply.github.com>
---
 cmd/client.go | 24 ++++++++++++++++++++++++
 1 file changed, 24 insertions(+)

diff --git a/cmd/client.go b/cmd/client.go
index e661069a..9b03b000 100644
--- a/cmd/client.go
+++ b/cmd/client.go
@@ -21,6 +21,7 @@ import (
 	"fmt"
 
 	"github.com/hyperledger/firefly-common/pkg/config"
+	"github.com/hyperledger/firefly-common/pkg/fftls"
 	"github.com/hyperledger/firefly-common/pkg/httpserver"
 	"github.com/hyperledger/firefly-transaction-manager/internal/apiclient"
 	"github.com/hyperledger/firefly-transaction-manager/internal/tmconfig"
@@ -31,6 +32,11 @@ var url string
 var nameRegex string
 var ignoreNotFound bool
 
+var tlsEnabled bool
+var caFile string
+var certFile string
+var keyFile string
+
 func ClientCommand() *cobra.Command {
 	return buildClientCommand(createClient)
 }
@@ -45,6 +51,11 @@ func buildClientCommand(clientFactory func() (apiclient.FFTMClient, error)) *cob
 	clientCmd.PersistentFlags().BoolVarP(&ignoreNotFound, "ignore-not-found", "", false, "Does not return an error if the resource is not found. Useful for idempotent delete functions.")
 	clientCmd.PersistentFlags().StringVarP(&url, "url", "", defaultURL, "The URL of the blockchain connector")
 
+	clientCmd.PersistentFlags().BoolVarP(&tlsEnabled, "tls", "", false, "Enable TLS on client")
+	clientCmd.PersistentFlags().StringVarP(&caFile, "cacert", "", "", "The tls CA cert file")
+	clientCmd.PersistentFlags().StringVarP(&certFile, "cert", "", "", "The tls cert file")
+	clientCmd.PersistentFlags().StringVarP(&keyFile, "key", "", "", "The tls key file")
+
 	clientCmd.AddCommand(clientEventStreamsCommand(clientFactory))
 	clientCmd.AddCommand(clientListenersCommand(clientFactory))
 
@@ -57,6 +68,19 @@ func createClient() (apiclient.FFTMClient, error) {
 	if url != "" {
 		cfg.Set("url", url)
 	}
+	if tlsEnabled {
+		tlsConf := cfg.SubSection("tls")
+		tlsConf.Set(fftls.HTTPConfTLSEnabled, true)
+		if caFile != "" {
+			tlsConf.Set(fftls.HTTPConfTLSCAFile, caFile)
+		}
+		if certFile != "" {
+			tlsConf.Set(fftls.HTTPConfTLSCertFile, certFile)
+		}
+		if keyFile != "" {
+			tlsConf.Set(fftls.HTTPConfTLSKeyFile, keyFile)
+		}
+	}
 	return apiclient.NewFFTMClient(context.Background(), cfg)
 }