change script

Signed-off-by: rukmini-basu-da <[email protected]>

Author: rukmini-basu-da

canton/devnet/canton-tls-enabled.conf

@@ -0,0 +1,55 @@
+canton.parameters.non-standard-config = yes
+canton {
+
+  features.enable-testing-commands = yes
+  features.enable-preview-commands = yes
+
+  sequencers {
+    sequencer1 {
+      init = {
+        generate-topology-transactions-and-keys = false
+        identity.type = manual
+      }
+      storage.type = memory
+      public-api.port = 5001
+      admin-api.port = 5002
+    }
+  }
+
+  mediators {
+    mediator1 {
+      init = {
+        generate-topology-transactions-and-keys = false
+        identity.type = manual
+      }
+      storage.type = memory
+      admin-api.port = 5202
+    }
+  }
+
+  participants {
+    // user-manual-entry-begin: port configuration
+
+    participant1 {
+      init = {
+        generate-topology-transactions-and-keys = false
+        identity.type = manual
+      }
+      admin-api.tls.cert-chain-file = "canton/tls/server.crt"
+      admin-api.tls.private-key-file = "canton/tls/server_pkcs8.pem"
+      admin-api.tls.trust-collection-file = "canton/tls/ca.crt"
+      ledger-api.max-token-lifetime=60.minutes
+      ledger-api.admin-token-config.act-as-any-party-claim=true
+      ledger-api.admin-token-config.admin-claim=true
+      storage.type = memory
+      admin-api.port = 5012
+      ledger-api.port = 5011
+      http-ledger-api.server.port = 5003
+      ledger-api.auth-services = [{
+        type = jwt-jwks
+            url = "http://127.0.0.1:8889/jwks"
+        }]
+    }
+
+  }
+}

canton/mainnet/canton-tls-enabled.conf

@@ -0,0 +1,51 @@
+canton {
+
+  features.enable-testing-commands = yes
+  features.enable-preview-commands = yes
+
+  sequencers {
+    sequencer1 {
+      init = {
+        generate-topology-transactions-and-keys = false
+        identity.type = manual
+      }
+      storage.type = memory
+      public-api.port = 5001
+      admin-api.port = 5002
+    }
+  }
+
+  mediators {
+    mediator1 {
+      init = {
+        generate-topology-transactions-and-keys = false
+        identity.type = manual
+      }
+      storage.type = memory
+      admin-api.port = 5202
+    }
+  }
+
+  participants {
+    // user-manual-entry-begin: port configuration
+
+    participant1 {
+      init = {
+        generate-topology-transactions-and-keys = false
+        identity.type = manual
+      }
+      admin-api.tls.cert-chain-file = "canton/tls/server.crt"
+      admin-api.tls.private-key-file = "canton/tls/server_pkcs8.pem"
+      admin-api.tls.trust-collection-file = "canton/tls/ca.crt"
+      storage.type = memory
+      admin-api.port = 5012
+      ledger-api.port = 5011
+      http-ledger-api.server.port = 5003
+      ledger-api.auth-services = [{
+        type = jwt-jwks
+            url = "http://127.0.0.1:8889/jwks"
+        }]
+    }
+    
+  }
+}

package.json

@@ -4,7 +4,7 @@
     "scripts": {
         "start:all": "yarn pm2 start ecosystem.config.js --env development",
         "start:canton": "tsx ./scripts/src/start-canton.ts",
-        "start:canton:tls": "tsx ./scripts/src/start-canton.ts network=mainnet config=canton/canton-tls-enabled.conf",
+        "start:canton:tls": "tsx ./scripts/src/start-canton.ts network=mainnet tls=true",
         "start:localnet": "tsx ./scripts/src/start-localnet.ts start",
         "start:canton:console": ".canton/bin/canton --config canton/canton.conf --bootstrap canton/bootstrap.canton",
         "stop:all": "yarn pm2 stop all",

scripts/src/start-canton.ts

@@ -22,6 +22,7 @@ const processName = 'canton'
 
 async function main() {
     const network: Network = getNetworkArg()
+    const tlsEnabled: boolean = getArgValue('tls') === 'true'
 
     const envConfig = SUPPORTED_VERSIONS[network]?.canton
     if (!envConfig) {
@@ -34,15 +35,15 @@ async function main() {
     }
 
     const networkDir = path.resolve(`canton/${network}`)
-    const inputCantonConf2 =
-        getArgValue('config') ?? path.join(networkDir, 'canton.conf')
+    const inputCantonConf = path.join(
+        networkDir,
+        tlsEnabled ? 'canton-tls-enabled.conf' : 'canton.conf'
+    )
 
     const cantonBootstrap = path.join(networkDir, 'bootstrap.sc')
 
     console.log(
-        info(
-            `usinng bootstrap: ${cantonBootstrap} and conf ${inputCantonConf2}`
-        )
+        info(`using bootstrap: ${cantonBootstrap} and conf ${inputCantonConf}`)
     )
 
     const { version } = envConfig
@@ -64,7 +65,7 @@ async function main() {
                     name: processName,
                     interpreter: '/bin/bash',
                     script: CANTON_BIN,
-                    args: `daemon --no-tty --config ${inputCantonConf2} --bootstrap ${cantonBootstrap} --log-level-stdout=INFO --log-level-canton=INFO`,
+                    args: `daemon --no-tty --config ${inputCantonConf} --bootstrap ${cantonBootstrap} --log-level-stdout=INFO --log-level-canton=INFO`,
                 },
                 function (err) {
                     pm2.launchBus((err, bus) => {