Rudder

Architecture #19492

Updated by Alexis Mousset almost 3 years ago

We need: 

 * The parent policy server's certificate in .pem format, in the inputs folder, only on policy servers. 
 * A hash of the policy server public key in @rudder.json@ on all nodes. This format is the one used in "HPKP":https://developer.mozilla.org/en-US/docs/Web/HTTP/Public_Key_Pinning#extracting_the_base64_encoded_public_key_information :  

 <pre> 
 openssl x509 -in my-certificate.pem -pubkey -noout | openssl pkey -pubin -outform der | openssl dgst -sha256 -binary | openssl enc -base64 
 </pre>

Back