Skip to main content

MavSeal's Authorized Key Authentication Feature

MavSeal provides the option to authenticate the mavkit-client, by specifying an "authorized key" in the MavSeal configuration file.

Motivation​

An authorized key can be configured to ensure that MavSeal only signs requests from an mavkit-client instance containing the private key.

Configuration​

First, a key pair is generated using mavkit-client:

mavkit-client gen keys mavseal-auth

Next, find the public key value:

cat ~/.mavryk-client/public_keys | grep -C 3 mavseal-auth

Finally, add the public key value to the MavSeal configuration file. It belongs within the server declaration:

server:
  address: :6732
  utility_address: :9583
  authorized_keys:
    - edpkujLb5ZCZ2gprnRzE9aVHKZfx9A8EtWu2xxkwYSjBUJbesJ9rWE

Restarting the MavSeal service is required to apply the configuration change. Henceforth, the MavSeal service will only accept requests from the mavkit-client that is using the private key associated with the public key specified in the configuration file.