Feat: Request client vpn access for krisstern (#323)

* [infra-admin] Submit certificate request for krisstern * feat: update README.md and .gitignore * fix: undo previous README.md change * [infra-admin] Sign certificate request for krisstern --------- Co-authored-by: Damien Duportal <damien.duportal@gmail.com>
jenkins-infra · Dec 27, 2023 · 1286ed4 · 1286ed4
1 parent 52309e5
commit 1286ed4
Show file tree

Hide file tree

Showing 7 changed files with 285 additions and 1 deletion.
diff --git a/.gitignore b/.gitignore
@@ -11,3 +11,4 @@ utils/easyvpn/easyvpn.exe
 .DS_Store
 hadolint.json
 *.tar
+.idea/
diff --git a/cert/ccd/private/krisstern b/cert/ccd/private/krisstern
@@ -0,0 +1,4 @@
+ifconfig-push 10.9.0.15 255.255.255.0
+push "route 10.248.0.0 255.252.0.0"
+push "route 10.244.0.0 255.252.0.0"
+push "route 10.252.0.0 255.255.248.0"
diff --git a/cert/pki/certs_by_serial/ADB24D82EAA2B799D56FDEE539C8AC7C.pem b/cert/pki/certs_by_serial/ADB24D82EAA2B799D56FDEE539C8AC7C.pem
@@ -0,0 +1,126 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number:
+            ad:b2:4d:82:ea:a2:b7:99:d5:6f:de:e5:39:c8:ac:7c
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=vpn.jenkins.io
+        Validity
+            Not Before: Dec 27 08:12:29 2023 GMT
+            Not After : Dec 11 08:12:29 2026 GMT
+        Subject: CN=krisstern
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (4096 bit)
+                Modulus:
+                    00:9a:6d:6d:92:a5:49:49:2c:20:58:02:ae:a5:4a:
+                    d4:86:93:5d:71:b7:8f:37:fd:22:b2:75:5d:f0:c5:
+                    56:a7:68:8c:b8:2b:df:73:e1:5c:ca:c8:3b:a3:57:
+                    4c:9d:c8:b1:56:0d:48:4e:fb:34:73:fd:57:22:fa:
+                    9e:05:0c:eb:fa:36:b3:8a:79:58:87:86:32:7b:07:
+                    72:2a:e2:2f:d1:77:89:91:ac:8d:2e:e4:6b:74:56:
+                    e1:ad:69:54:32:56:72:07:67:25:63:bc:ee:ba:57:
+                    1a:4d:90:02:4c:d4:ac:f5:df:41:ab:af:d7:c5:91:
+                    c7:20:64:de:ef:95:61:0f:8b:66:94:2b:8c:4b:b9:
+                    bb:68:cd:9b:b1:5c:41:53:57:8e:d9:ae:27:33:f0:
+                    42:3b:6f:5f:14:10:08:24:0e:45:6b:ec:02:2e:69:
+                    19:bf:94:71:59:51:c5:d4:c4:93:42:fa:1f:95:8e:
+                    34:19:5b:c8:b2:62:1a:4f:06:1f:77:a2:fe:2c:d5:
+                    c5:22:87:96:4b:94:7b:8c:4d:9d:3a:8c:36:8a:4b:
+                    eb:20:08:95:c4:31:15:1c:cc:13:b7:4b:1f:fd:82:
+                    34:55:14:3d:cf:2b:64:f8:a2:df:4c:3f:c9:bf:a8:
+                    ed:90:54:59:78:d4:d6:79:cd:21:c6:42:2b:a0:db:
+                    d0:3c:a8:d5:3c:91:9c:1f:bf:2b:b1:17:24:c1:bb:
+                    22:59:de:9c:f0:70:e0:92:59:13:c3:df:17:88:62:
+                    a8:00:52:0a:8a:c7:d1:7e:0d:f0:4d:63:8e:65:cd:
+                    81:fd:92:51:79:3c:7a:f4:b0:99:55:d2:8e:4d:33:
+                    4c:f3:83:98:61:f0:7f:1a:c5:4c:cc:5f:f7:e0:39:
+                    a9:cd:17:39:37:63:5a:68:03:93:61:7f:81:63:dc:
+                    4d:75:8a:37:82:78:a4:64:b5:8d:85:a1:e5:f5:d5:
+                    7f:8f:3f:94:f5:63:fa:ba:c7:6d:8b:37:eb:e7:6b:
+                    7c:37:2e:8a:13:2d:64:66:9d:97:0f:0d:3d:f7:cb:
+                    10:16:ab:b1:0c:e0:08:36:cd:e9:61:6f:23:41:fa:
+                    c1:ac:d3:4e:b2:e7:5b:e4:e8:90:5a:5e:bc:da:a8:
+                    45:06:04:d0:5d:02:b3:c0:ea:a4:42:d2:86:af:eb:
+                    5d:d4:4e:92:f0:ff:7f:b0:c3:aa:f7:0a:40:b1:0a:
+                    02:58:df:4c:d6:5a:20:a0:fb:f4:e3:86:58:39:e3:
+                    c8:b8:3e:05:81:02:3a:59:fe:c0:0e:11:0f:95:96:
+                    a1:0a:51:74:6a:71:60:6f:7a:f2:ee:ed:bf:1a:fe:
+                    e1:b6:87:98:5e:41:cb:e1:8f:38:07:91:95:b9:6c:
+                    c6:98:93
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: 
+                CA:FALSE
+            X509v3 Subject Key Identifier: 
+                80:34:4E:4B:30:BC:CC:8B:0D:23:58:E7:13:7C:F1:71:0C:52:DE:5A
+            X509v3 Authority Key Identifier: 
+                keyid:87:A7:C5:75:37:0B:14:6C:BF:46:04:8C:2A:52:E9:5D:DA:51:DC:E6
+                DirName:/CN=vpn.jenkins.io
+                serial:08:01:AA:6D:1B:31:40:4F:7B:9C:75:54:54:78:B5:36:65:3B:7C:B3
+            X509v3 Extended Key Usage: 
+                TLS Web Client Authentication
+            X509v3 Key Usage: 
+                Digital Signature
+    Signature Algorithm: sha256WithRSAEncryption
+    Signature Value:
+        4e:97:39:26:87:e9:e1:c1:0d:dd:29:18:10:05:c2:e7:4d:ab:
+        61:2a:a1:10:5c:c4:47:f9:ad:34:42:7e:61:83:11:f7:70:a3:
+        8e:b0:5e:92:7f:f3:b9:59:02:4f:69:00:1f:9b:6a:91:bc:35:
+        14:1c:c8:d8:0f:5c:cc:74:96:ae:d5:a9:84:44:6f:60:d7:3f:
+        f3:67:0a:67:9e:4f:4e:f4:ca:20:4b:2d:2b:96:79:11:eb:bd:
+        64:b5:f9:54:ab:7f:f5:e8:45:5c:10:15:cd:8d:a0:a0:15:b6:
+        4f:ae:c2:b9:66:23:02:47:68:1c:f3:9a:38:93:28:44:46:b0:
+        b6:fc:e0:7d:f5:d0:1e:d7:22:57:44:3e:0b:5f:ac:f2:38:bc:
+        60:5e:c2:e5:84:60:c8:7b:82:32:fd:09:20:30:8d:5c:95:48:
+        b2:6d:9f:22:d7:08:77:bd:af:a7:a9:05:0b:30:16:af:8f:f5:
+        e8:c7:95:b8:fa:72:32:a9:b7:b8:36:58:8e:89:19:06:e3:9d:
+        75:f5:85:cb:6d:25:fd:84:04:3c:e3:2f:b1:fd:ef:f2:1b:77:
+        da:20:5f:ad:2b:64:1a:17:37:13:88:a5:c4:7f:a1:69:27:8d:
+        38:2e:17:48:52:ad:62:19:bd:22:8a:30:ac:70:b3:0b:0a:8c:
+        0c:6e:4d:9b:85:53:63:f7:a1:68:f3:e1:5c:b1:80:c6:44:78:
+        6b:ca:49:cb:f6:ff:1b:c0:e1:2e:07:96:10:9b:54:db:82:48:
+        30:cb:06:6f:92:6d:00:28:a7:51:6d:a6:3f:ce:84:f7:98:b4:
+        78:06:a0:13:7e:91:22:d4:89:da:71:60:c8:bf:0b:0d:1d:7e:
+        cc:86:b5:24:01:85:7c:58:3b:c2:f3:99:9b:14:62:2b:c8:f2:
+        c4:c1:91:ab:17:a9:ab:62:b4:73:0a:ac:be:7f:9c:a8:1a:05:
+        0b:7e:d9:c3:e5:3a:28:3f:a0:ce:c2:a5:dc:53:9e:bd:d9:49:
+        af:5c:6c:be:bb:0f:c1:5e:f9:dd:52:5d:96:d1:60:8c:58:33:
+        57:0a:42:2c:69:cc:91:61:dc:90:8d:89:dd:b6:e6:93:83:62:
+        7c:ad:0e:e9:f3:83:0b:5c:93:28:9c:c7:2c:3d:2b:4c:22:b2:
+        9b:86:70:a1:5e:90:17:6e:3c:2e:80:69:e0:72:2a:cb:79:49:
+        42:88:42:60:59:13:11:4e:3c:b2:94:a6:01:7e:c3:b2:5a:95:
+        35:16:50:1d:bd:80:ef:78:ae:0e:03:0e:88:2a:27:5e:d6:f1:
+        4e:2f:35:05:e9:d0:e8:78:d7:52:6a:45:7f:3f:50:a9:53:26:
+        ab:cc:1d:96:e4:16:2d:36
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/cert/pki/index.txt b/cert/pki/index.txt
@@ -52,3 +52,4 @@ V	260607112656Z		D74F2B832A3E19FB82F462FD5535E985	unknown	/CN=lemeurherveCB
 V	260613104316Z		1A141D7F5C418D6A58109BD7F9525F52	unknown	/CN=hlemeur
 V	261029160833Z		E2AA4F96EF4C759EB1193AAEC1AD7212	unknown	/CN=markewaite
 V	261118110611Z		09C90E936FA53BF4A776525E9A4C163D	unknown	/CN=dduportal
+V	261211081229Z		ADB24D82EAA2B799D56FDEE539C8AC7C	unknown	/CN=krisstern
diff --git a/cert/pki/issued/krisstern.crt b/cert/pki/issued/krisstern.crt
@@ -0,0 +1,126 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number:
+            ad:b2:4d:82:ea:a2:b7:99:d5:6f:de:e5:39:c8:ac:7c
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=vpn.jenkins.io
+        Validity
+            Not Before: Dec 27 08:12:29 2023 GMT
+            Not After : Dec 11 08:12:29 2026 GMT
+        Subject: CN=krisstern
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (4096 bit)
+                Modulus:
+                    00:9a:6d:6d:92:a5:49:49:2c:20:58:02:ae:a5:4a:
+                    d4:86:93:5d:71:b7:8f:37:fd:22:b2:75:5d:f0:c5:
+                    56:a7:68:8c:b8:2b:df:73:e1:5c:ca:c8:3b:a3:57:
+                    4c:9d:c8:b1:56:0d:48:4e:fb:34:73:fd:57:22:fa:
+                    9e:05:0c:eb:fa:36:b3:8a:79:58:87:86:32:7b:07:
+                    72:2a:e2:2f:d1:77:89:91:ac:8d:2e:e4:6b:74:56:
+                    e1:ad:69:54:32:56:72:07:67:25:63:bc:ee:ba:57:
+                    1a:4d:90:02:4c:d4:ac:f5:df:41:ab:af:d7:c5:91:
+                    c7:20:64:de:ef:95:61:0f:8b:66:94:2b:8c:4b:b9:
+                    bb:68:cd:9b:b1:5c:41:53:57:8e:d9:ae:27:33:f0:
+                    42:3b:6f:5f:14:10:08:24:0e:45:6b:ec:02:2e:69:
+                    19:bf:94:71:59:51:c5:d4:c4:93:42:fa:1f:95:8e:
+                    34:19:5b:c8:b2:62:1a:4f:06:1f:77:a2:fe:2c:d5:
+                    c5:22:87:96:4b:94:7b:8c:4d:9d:3a:8c:36:8a:4b:
+                    eb:20:08:95:c4:31:15:1c:cc:13:b7:4b:1f:fd:82:
+                    34:55:14:3d:cf:2b:64:f8:a2:df:4c:3f:c9:bf:a8:
+                    ed:90:54:59:78:d4:d6:79:cd:21:c6:42:2b:a0:db:
+                    d0:3c:a8:d5:3c:91:9c:1f:bf:2b:b1:17:24:c1:bb:
+                    22:59:de:9c:f0:70:e0:92:59:13:c3:df:17:88:62:
+                    a8:00:52:0a:8a:c7:d1:7e:0d:f0:4d:63:8e:65:cd:
+                    81:fd:92:51:79:3c:7a:f4:b0:99:55:d2:8e:4d:33:
+                    4c:f3:83:98:61:f0:7f:1a:c5:4c:cc:5f:f7:e0:39:
+                    a9:cd:17:39:37:63:5a:68:03:93:61:7f:81:63:dc:
+                    4d:75:8a:37:82:78:a4:64:b5:8d:85:a1:e5:f5:d5:
+                    7f:8f:3f:94:f5:63:fa:ba:c7:6d:8b:37:eb:e7:6b:
+                    7c:37:2e:8a:13:2d:64:66:9d:97:0f:0d:3d:f7:cb:
+                    10:16:ab:b1:0c:e0:08:36:cd:e9:61:6f:23:41:fa:
+                    c1:ac:d3:4e:b2:e7:5b:e4:e8:90:5a:5e:bc:da:a8:
+                    45:06:04:d0:5d:02:b3:c0:ea:a4:42:d2:86:af:eb:
+                    5d:d4:4e:92:f0:ff:7f:b0:c3:aa:f7:0a:40:b1:0a:
+                    02:58:df:4c:d6:5a:20:a0:fb:f4:e3:86:58:39:e3:
+                    c8:b8:3e:05:81:02:3a:59:fe:c0:0e:11:0f:95:96:
+                    a1:0a:51:74:6a:71:60:6f:7a:f2:ee:ed:bf:1a:fe:
+                    e1:b6:87:98:5e:41:cb:e1:8f:38:07:91:95:b9:6c:
+                    c6:98:93
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: 
+                CA:FALSE
+            X509v3 Subject Key Identifier: 
+                80:34:4E:4B:30:BC:CC:8B:0D:23:58:E7:13:7C:F1:71:0C:52:DE:5A
+            X509v3 Authority Key Identifier: 
+                keyid:87:A7:C5:75:37:0B:14:6C:BF:46:04:8C:2A:52:E9:5D:DA:51:DC:E6
+                DirName:/CN=vpn.jenkins.io
+                serial:08:01:AA:6D:1B:31:40:4F:7B:9C:75:54:54:78:B5:36:65:3B:7C:B3
+            X509v3 Extended Key Usage: 
+                TLS Web Client Authentication
+            X509v3 Key Usage: 
+                Digital Signature
+    Signature Algorithm: sha256WithRSAEncryption
+    Signature Value:
+        4e:97:39:26:87:e9:e1:c1:0d:dd:29:18:10:05:c2:e7:4d:ab:
+        61:2a:a1:10:5c:c4:47:f9:ad:34:42:7e:61:83:11:f7:70:a3:
+        8e:b0:5e:92:7f:f3:b9:59:02:4f:69:00:1f:9b:6a:91:bc:35:
+        14:1c:c8:d8:0f:5c:cc:74:96:ae:d5:a9:84:44:6f:60:d7:3f:
+        f3:67:0a:67:9e:4f:4e:f4:ca:20:4b:2d:2b:96:79:11:eb:bd:
+        64:b5:f9:54:ab:7f:f5:e8:45:5c:10:15:cd:8d:a0:a0:15:b6:
+        4f:ae:c2:b9:66:23:02:47:68:1c:f3:9a:38:93:28:44:46:b0:
+        b6:fc:e0:7d:f5:d0:1e:d7:22:57:44:3e:0b:5f:ac:f2:38:bc:
+        60:5e:c2:e5:84:60:c8:7b:82:32:fd:09:20:30:8d:5c:95:48:
+        b2:6d:9f:22:d7:08:77:bd:af:a7:a9:05:0b:30:16:af:8f:f5:
+        e8:c7:95:b8:fa:72:32:a9:b7:b8:36:58:8e:89:19:06:e3:9d:
+        75:f5:85:cb:6d:25:fd:84:04:3c:e3:2f:b1:fd:ef:f2:1b:77:
+        da:20:5f:ad:2b:64:1a:17:37:13:88:a5:c4:7f:a1:69:27:8d:
+        38:2e:17:48:52:ad:62:19:bd:22:8a:30:ac:70:b3:0b:0a:8c:
+        0c:6e:4d:9b:85:53:63:f7:a1:68:f3:e1:5c:b1:80:c6:44:78:
+        6b:ca:49:cb:f6:ff:1b:c0:e1:2e:07:96:10:9b:54:db:82:48:
+        30:cb:06:6f:92:6d:00:28:a7:51:6d:a6:3f:ce:84:f7:98:b4:
+        78:06:a0:13:7e:91:22:d4:89:da:71:60:c8:bf:0b:0d:1d:7e:
+        cc:86:b5:24:01:85:7c:58:3b:c2:f3:99:9b:14:62:2b:c8:f2:
+        c4:c1:91:ab:17:a9:ab:62:b4:73:0a:ac:be:7f:9c:a8:1a:05:
+        0b:7e:d9:c3:e5:3a:28:3f:a0:ce:c2:a5:dc:53:9e:bd:d9:49:
+        af:5c:6c:be:bb:0f:c1:5e:f9:dd:52:5d:96:d1:60:8c:58:33:
+        57:0a:42:2c:69:cc:91:61:dc:90:8d:89:dd:b6:e6:93:83:62:
+        7c:ad:0e:e9:f3:83:0b:5c:93:28:9c:c7:2c:3d:2b:4c:22:b2:
+        9b:86:70:a1:5e:90:17:6e:3c:2e:80:69:e0:72:2a:cb:79:49:
+        42:88:42:60:59:13:11:4e:3c:b2:94:a6:01:7e:c3:b2:5a:95:
+        35:16:50:1d:bd:80:ef:78:ae:0e:03:0e:88:2a:27:5e:d6:f1:
+        4e:2f:35:05:e9:d0:e8:78:d7:52:6a:45:7f:3f:50:a9:53:26:
+        ab:cc:1d:96:e4:16:2d:36
+-----BEGIN CERTIFICATE-----
+MIIFXjCCA0agAwIBAgIRAK2yTYLqoreZ1W/e5TnIrHwwDQYJKoZIhvcNAQELBQAw
+GTEXMBUGA1UEAwwOdnBuLmplbmtpbnMuaW8wHhcNMjMxMjI3MDgxMjI5WhcNMjYx
+MjExMDgxMjI5WjAUMRIwEAYDVQQDDAlrcmlzc3Rlcm4wggIiMA0GCSqGSIb3DQEB
+AQUAA4ICDwAwggIKAoICAQCabW2SpUlJLCBYAq6lStSGk11xt483/SKydV3wxVan
+aIy4K99z4VzKyDujV0ydyLFWDUhO+zRz/Vci+p4FDOv6NrOKeViHhjJ7B3Iq4i/R
+d4mRrI0u5Gt0VuGtaVQyVnIHZyVjvO66VxpNkAJM1Kz130Grr9fFkccgZN7vlWEP
+i2aUK4xLubtozZuxXEFTV47Zricz8EI7b18UEAgkDkVr7AIuaRm/lHFZUcXUxJNC
++h+VjjQZW8iyYhpPBh93ov4s1cUih5ZLlHuMTZ06jDaKS+sgCJXEMRUczBO3Sx/9
+gjRVFD3PK2T4ot9MP8m/qO2QVFl41NZ5zSHGQiug29A8qNU8kZwfvyuxFyTBuyJZ
+3pzwcOCSWRPD3xeIYqgAUgqKx9F+DfBNY45lzYH9klF5PHr0sJlV0o5NM0zzg5hh
+8H8axUzMX/fgOanNFzk3Y1poA5Nhf4Fj3E11ijeCeKRktY2FoeX11X+PP5T1Y/q6
+x22LN+vna3w3LooTLWRmnZcPDT33yxAWq7EM4Ag2zelhbyNB+sGs006y51vk6JBa
+XrzaqEUGBNBdArPA6qRC0oav613UTpLw/3+ww6r3CkCxCgJY30zWWiCg+/Tjhlg5
+48i4PgWBAjpZ/sAOEQ+VlqEKUXRqcWBvevLu7b8a/uG2h5heQcvhjzgHkZW5bMaY
+kwIDAQABo4GlMIGiMAkGA1UdEwQCMAAwHQYDVR0OBBYEFIA0TkswvMyLDSNY5xN8
+8XEMUt5aMFQGA1UdIwRNMEuAFIenxXU3CxRsv0YEjCpS6V3aUdzmoR2kGzAZMRcw
+FQYDVQQDDA52cG4uamVua2lucy5pb4IUCAGqbRsxQE97nHVUVHi1NmU7fLMwEwYD
+VR0lBAwwCgYIKwYBBQUHAwIwCwYDVR0PBAQDAgeAMA0GCSqGSIb3DQEBCwUAA4IC
+AQBOlzkmh+nhwQ3dKRgQBcLnTathKqEQXMRH+a00Qn5hgxH3cKOOsF6Sf/O5WQJP
+aQAfm2qRvDUUHMjYD1zMdJau1amERG9g1z/zZwpnnk9O9MogSy0rlnkR671ktflU
+q3/16EVcEBXNjaCgFbZPrsK5ZiMCR2gc85o4kyhERrC2/OB99dAe1yJXRD4LX6zy
+OLxgXsLlhGDIe4Iy/QkgMI1clUiybZ8i1wh3va+nqQULMBavj/Xox5W4+nIyqbe4
+NliOiRkG45119YXLbSX9hAQ84y+x/e/yG3faIF+tK2QaFzcTiKXEf6FpJ404LhdI
+Uq1iGb0iijCscLMLCowMbk2bhVNj96Fo8+FcsYDGRHhryknL9v8bwOEuB5YQm1Tb
+gkgwywZvkm0AKKdRbaY/zoT3mLR4BqATfpEi1InacWDIvwsNHX7MhrUkAYV8WDvC
+85mbFGIryPLEwZGrF6mrYrRzCqy+f5yoGgULftnD5TooP6DOwqXcU5692UmvXGy+
+uw/BXvndUl2W0WCMWDNXCkIsacyRYdyQjYndtuaTg2J8rQ7p84MLXJMonMcsPStM
+IrKbhnChXpAXbjwugGngcirLeUlCiEJgWRMRTjyylKYBfsOyWpU1FlAdvYDveK4O
+Aw6IKide1vFOLzUF6dDoeNdSakV/P1CpUyarzB2W5BYtNg==
+-----END CERTIFICATE-----
diff --git a/cert/pki/reqs/krisstern.req b/cert/pki/reqs/krisstern.req
@@ -0,0 +1,26 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----
diff --git a/cert/pki/serial b/cert/pki/serial
@@ -1 +1 @@
-09C90E936FA53BF4A776525E9A4C163E
+ADB24D82EAA2B799D56FDEE539C8AC7D