Project

General

Profile

Actions
Copy link

Architecture #6186

closed

Accept node based solely on their public key

Added by Benoît PECCATTE almost 10 years ago. Updated almost 7 years ago.

Status:
Rejected
Priority:
N/A
Assignee:
-
Category:
Web - Config management
Target version:
Ideas (not version specific)
Pull Request:
Effort required:
Name check:
Fix check:
Regression:

Description

Today we accept nodes using TOFU, where the first use is checked on a mix of their IP and their reverse dns.

We now have the public key of an agent declared in its inventory.
We should use this information and trust the agent based on this key.

We would then have a lot less problem related to agent refusal by the server.
And this would be more secure than the current setup.

Actions
Copy link
 #1

Updated by Benoît PECCATTE almost 10 years ago

  • Category changed from 14 to Web - Config management
Actions
Copy link
 #2

Updated by Vincent MEMBRÉ over 9 years ago

  • Target version changed from 3.1.0~beta1 to 3.1.0~rc1
Actions
Copy link
 #3

Updated by Vincent MEMBRÉ over 9 years ago

  • Target version changed from 3.1.0~rc1 to 3.1.0
Actions
Copy link
 #4

Updated by Vincent MEMBRÉ over 9 years ago

  • Target version changed from 3.1.0 to 3.1.1
Actions
Copy link
 #5

Updated by Vincent MEMBRÉ over 9 years ago

  • Target version changed from 3.1.1 to 3.1.2
Actions
Copy link
 #6

Updated by Vincent MEMBRÉ over 9 years ago

  • Target version changed from 3.1.2 to 3.1.3
Actions
Copy link
 #7

Updated by Vincent MEMBRÉ about 9 years ago

  • Target version changed from 3.1.3 to 3.1.4
Actions
Copy link
 #8

Updated by Vincent MEMBRÉ about 9 years ago

  • Target version changed from 3.1.4 to 3.1.5
Actions
Copy link
 #9

Updated by Vincent MEMBRÉ about 9 years ago

  • Target version changed from 3.1.5 to 3.1.6
Actions
Copy link
 #10

Updated by Vincent MEMBRÉ almost 9 years ago

  • Target version changed from 3.1.6 to 3.1.7
Actions
Copy link
 #11

Updated by Vincent MEMBRÉ almost 9 years ago

  • Target version changed from 3.1.7 to 3.1.8
Actions
Copy link
 #12

Updated by Vincent MEMBRÉ almost 9 years ago

  • Target version changed from 3.1.8 to 3.1.9
Actions
Copy link
 #13

Updated by Alexis Mousset almost 9 years ago

  • Target version changed from 3.1.9 to 4.0.0~rc2
Actions
Copy link
 #14

Updated by François ARMAND about 8 years ago

  • Target version changed from 4.0.0~rc2 to 4.1.0~beta1
Actions
Copy link
 #15

Updated by Vincent MEMBRÉ almost 8 years ago

  • Target version changed from 4.1.0~beta1 to 4.1.0~beta2
Actions
Copy link
 #16

Updated by Vincent MEMBRÉ almost 8 years ago

  • Target version changed from 4.1.0~beta2 to 4.1.0~beta3
Actions
Copy link
 #17

Updated by Vincent MEMBRÉ almost 8 years ago

  • Target version changed from 4.1.0~beta3 to 4.1.0~rc1
Actions
Copy link
 #18

Updated by Benoît PECCATTE almost 8 years ago

  • Target version changed from 4.1.0~rc1 to 4.2.0~beta1
Actions
Copy link
 #19

Updated by Alexis Mousset over 7 years ago

  • Target version changed from 4.2.0~beta1 to 4.2.0~beta2
Actions
Copy link
 #20

Updated by Vincent MEMBRÉ over 7 years ago

  • Target version changed from 4.2.0~beta2 to 4.2.0~beta3
Actions
Copy link
 #21

Updated by Vincent MEMBRÉ over 7 years ago

  • Target version changed from 4.2.0~beta3 to 4.2.0~rc1
Actions
Copy link
 #22

Updated by Vincent MEMBRÉ over 7 years ago

  • Target version changed from 4.2.0~rc1 to 4.2.0~rc2
Actions
Copy link
 #23

Updated by Vincent MEMBRÉ over 7 years ago

  • Target version changed from 4.2.0~rc2 to 4.2.0
Actions
Copy link
 #24

Updated by Vincent MEMBRÉ about 7 years ago

  • Target version changed from 4.2.0 to 4.2.1
Actions
Copy link
 #25

Updated by Vincent MEMBRÉ about 7 years ago

  • Target version changed from 4.2.1 to 4.2.2
Actions
Copy link
 #26

Updated by Vincent MEMBRÉ about 7 years ago

  • Target version changed from 4.2.2 to 4.2.3
Actions
Copy link
 #27

Updated by Vincent MEMBRÉ about 7 years ago

  • Target version changed from 4.2.3 to 4.2.4
Actions
Copy link
 #28

Updated by Benoît PECCATTE almost 7 years ago

  • Target version changed from 4.2.4 to Ideas (not version specific)
Actions
Copy link
 #29

Updated by Benoît PECCATTE almost 7 years ago

  • Status changed from New to Rejected

This has been done by a mix of:
- the new cfengine protocol
- inventory signature
- agent key in the inventory

Actions
Copy link

Also available in: Atom PDF