Project

General

Profile

Actions

Architecture #8985

closed

Add node key in managed_nodes system variable

Added by Benoît PECCATTE about 8 years ago. Updated about 8 years ago.

Status:
Released
Priority:
N/A
Category:
System techniques
Target version:
Effort required:
Name check:
Fix check:
Regression:

Description

The variable would be MANAGED_NODES_KEY

Its content should be a list of hash in the form "MD5=xxx" where the hash algorithm is :
parse the key then
EVP_DigestInit(&context, md); # extract modulus in big endian binary form
actlen = BN_bn2bin(key->n, buffer);
EVP_DigestUpdate(&context, buffer, actlen); # extract exponent in big endian binary form
actlen = BN_bn2bin(key->e, buffer);
EVP_DigestUpdate(&context, buffer, actlen);
EVP_DigestFinal(&context, digest, &md_len);

To check a sum, just take a file in /var/rudder/cfengine-community/ppkeys and its hash must match the one in its name.

If a node's key is unknown, the hash should be replaced by an empty value.


Subtasks 2 (0 open2 closed)

Bug #9252: System variable "MANAGED_NODES_KEY" is emptyReleasedFrançois ARMAND2016-10-07Actions
Bug #9260: Broken test after parent ticket #9252ReleasedFrançois ARMAND2016-10-07Actions
Actions

Also available in: Atom PDF