Do CA files still have to be copied to each harvester?

I’m trying to turn one of my full nodes into a harvester and came across this in the github wiki page on harvesters:

Security Concern:

Since beta27, the CA files are copied to each harvester, as the daemon currently needs it to startup correctly. This is not ideal, and a new way to distribute certificates will be implemented in a subsequent release post mainnet launch. Please be careful when running your harvester that is accessible from the open internet.

Is this still the case in 1.1.3? I skimmed through the changelogs from 1.0.0 onward, couldn’t find anything related to CA files though.

Yes - the ca directory needs to be copied over to the harvester machine somewhere and you have to run

chia init -c <directory>

where they are located so the harvester can talk to your full node properly.

This wiki post explains it more fully:

Farming on many machines · Chia-Network/chia-blockchain Wiki · GitHub

3 Likes

Important: Delete the /ca folder when you’re done with doing chia init -c <directory>.

3 Likes