Project

General

Profile

Actions
Copy link

Architecture #26942

open

Add new settings to handle certificate trust

Added by Benoît PECCATTE 8 days ago. Updated 3 days ago.

Status:
Pending technical review
Priority:
N/A
Assignee:
Vincent MEMBRÉ
Category:
Web - Config management
Target version:
9.0.0~alpha1
Pull Request:
https://github.com/Normation/rudder/p...
Effort required:
Name check:
To do
Fix check:
To do
Regression:
No

Description

Add 3 new settings in rudder-web.properties that will be generated into 3 new values in policy's rudder.json files.
Here are what the 3 generated values must look like :

  • ADDITIONAL_POLICY_SERVER_KEY_HASH: list of key hashes, in the form [ "sha256//Pxjkq/Qlp02j8Q3ti3M1khEaUTL7Dxcz8sLOfGcg5rQ=", ... ], default empty
  • POLICY_SERVER_CERT_NAME_VALIDATION: boolean, default false
  • POLICY_SERVER_CERT_CA: pem certificate, default empty

Subtasks 2 (2 open — 0 closed)

Architecture #26950: Handle certificate trust in rudder-clientPending technical reviewAlexis MoussetActions
Architecture #26975: Generate rudder-client certificate authority before any rudder-client callPending technical reviewAlexis MoussetActions
Actions
Copy link

Also available in: Atom PDF