Encrypting Connections with TLS

    Using TLS to connect to a server that verifies the client’s identity is straightforward. The client has to provide a certificate and private key. The NATS client will use these to prove it’s identity to the server. For the client to verify the server’s identity, the CA certificate is provided as well.

    Use example certificates created in .

    {% tabs %} {% tab title=”Go” %}

    1. nc, err := nats.Connect("localhost",
    2.     nats.ClientCert("client-cert.pem", "client-key.pem"),
    3.     nats.RootCAs("rootCA.pem"))
    4. if err != nil {
    5.     log.Fatal(err)
    6. }
    7. defer nc.Close()
    9. // Do something with the connection

    {% endtab %}

    {% endtab %}

    {% tab title=”JavaScript” %}

    1. // tls options available depend on the javascript
    2. // runtime, please verify the readme for the
    3. // client you are using for specific details
    4. // this example showing the node library
    5. const nc = await connect({
    6.   port: ns.port,
    7.   debug: true,
    8.   tls: {
    9.     caFile: caCertPath,
    10.     keyFile: clientKeyPath,
    11.     certFile: clientCertPath,
    12.   },

    {% endtab %}

    {% tab title=”Python” %}

    {% tab title=”Ruby” %}

    1. EM.run do
    3.   options = {
    4.     :servers => [
    5.       'nats://localhost:4222',
    6.     ],
    7.     :tls => {
    8.       :private_key_file => 'client-key.pem',
    9.       :cert_chain_file  => 'client-cert.pem',
    10.       :ca_file => 'rootCA.pem'
    11.     }
    12.   }
    14.   NATS.connect(options) do |nc|
    15.     puts "#{Time.now.to_f} - Connected to NATS at #{nc.connected_server}"
    17.     nc.subscribe("hello") do |msg|
    18.       puts "#{Time.now.to_f} - Received: #{msg}"
    19.     end
    21.     nc.flush do
    22.       nc.publish("hello", "world")
    23.     end
    26.       nc.publish("hello", "hello")
    27.     end
    29.     # Set default callbacks
    30.     nc.on_error do |e|
    31.       puts "#{Time.now.to_f } - Error: #{e}"
    32.     end
    34.     nc.on_disconnect do |reason|
    35.       puts "#{Time.now.to_f} - Disconnected: #{reason}"
    36.     end
    38.     nc.on_reconnect do |nc|
    39.       puts "#{Time.now.to_f} - Reconnected to NATS server at #{nc.connected_server}"
    40.     end
    42.     nc.on_close do
    43.       puts "#{Time.now.to_f} - Connection to NATS closed"
    44.       EM.stop
    45.     end
    46.   end
    47. end

    {% endtab %}

    {% tab title=”C” %}

    {% endtab %} {% endtabs %}

    Connecting with the TLS Protocol

    See Also