-
Notifications
You must be signed in to change notification settings - Fork 121
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
functioning spike for aws winrm ssl cert fingerprints #354
Conversation
winrm_subject = winrm_cert.subject.to_s.split('=').last.upcase | ||
winrm_thumbprint=OpenSSL::Digest::SHA1.new(winrm_cert.to_der).to_s.upcase | ||
|
||
if rdp_subject != winrm_subject or rdp_thumbprint != winrm_thumbprint |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
We need to do a quick ssl / noverify connection in order to pull the cert. The cert thumbprint can then be verified against the last console entry for RDP certificate creation. See WinRb/WinRM#151
@@ -1,3 +1,6 @@ | |||
#require 'byebug' |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
These debugging statements need to be removed
This needs to be rebased against master - I added logic to wait until the EC2 log shows |
@hh Before we merge this you need to get an answer on the questions from the bottom of chef-boneyard/chef-provisioning#443 |
Closing this out since we never got a response from the contributor. |
This 'works for me' but needs more eyes.
I will clean up these commits when there is a general consensus regarding the locations and such... this is a spike.