ExternalVendorCode/corda
1
0
Fork 0
mirror of https://github.com/corda/corda.git synced 2025-04-25 13:29:51 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity
corda/docs/source/out-of-process-verification.rst
Joel Dudley e5fba5d0af Docsite reorg ahead of beta launch.
2017-06-05 13:37:23 +01:00

1.3 KiB
Raw Blame History

Out-of-process verification

A Corda node does transaction verification through ServiceHub.transactionVerifierService. This is by default an InMemoryTransactionVerifierService which just verifies transactions in-process.

Corda may be configured to use out of process verification. Any number of verifiers may be started connecting to a node through the node's exposed artemis SSL port. The messaging layer takes care of load balancing.

Note

We plan to introduce kernel level sandboxing around the out of process verifiers as an additional line of defence in case of inner sandbox escapes.

To configure a node to use out of process verification specify the verifierType option in your node.conf:

example-code/src/main/resources/example-out-of-process-verifier-node.conf

You can build a verifier jar using ./gradlew verifier:standaloneJar.

And run it with java -jar verifier/build/libs/corda-verifier.jar <PATH_TO_VERIFIER_BASE_DIR>.

PATH_TO_VERIFIER_BASE_DIR should contain a certificates folder akin to the one in a node directory, and a verifier.conf containing the following:

example-code/src/main/resources/example-verifier.conf