Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Passwordless PKI mode #7066

Merged
merged 7 commits into from Mar 20, 2020
Merged

Passwordless PKI mode #7066

merged 7 commits into from Mar 20, 2020

Conversation

@monstermunchkin
Copy link
Member

monstermunchkin commented Mar 20, 2020

No description provided.

Signed-off-by: Thomas Hipp <thomas.hipp@canonical.com>
@monstermunchkin monstermunchkin force-pushed the monstermunchkin:issues/3832 branch from cf5d790 to 68bb60a Mar 20, 2020
@lxc-jenkins

This comment has been minimized.

Copy link

lxc-jenkins commented Mar 20, 2020

Testsuite passed

doc/server.md Outdated Show resolved Hide resolved
lxd/main_init.go Outdated Show resolved Hide resolved
Signed-off-by: Thomas Hipp <thomas.hipp@canonical.com>
This adds two more parameters to CheckTrustState. The first is a
certInfo which contains all server certificates including an optional
CA.
The second parameter is a boolean which tells the function if it
should check for trusted CA certificates.

Signed-off-by: Thomas Hipp <thomas.hipp@canonical.com>
This adds the core.trust_ca_certificates config key.

Signed-off-by: Thomas Hipp <thomas.hipp@canonical.com>
This adds a CRL to CertInfo which can hold a list of revoked
certificates.

Signed-off-by: Thomas Hipp <thomas.hipp@canonical.com>
This checks the CRL for revoked client certificates.

Signed-off-by: Thomas Hipp <thomas.hipp@canonical.com>
This extends the PKI tests by testing CA-trusted client certificates.

Signed-off-by: Thomas Hipp <thomas.hipp@canonical.com>
@monstermunchkin monstermunchkin force-pushed the monstermunchkin:issues/3832 branch from 68bb60a to 235efcf Mar 20, 2020
@lxc-jenkins

This comment has been minimized.

Copy link

lxc-jenkins commented Mar 20, 2020

Testsuite passed

@stgraber stgraber merged commit c4b1de1 into lxc:master Mar 20, 2020
4 of 5 checks passed
4 of 5 checks passed
continuous-integration/travis-ci/pr The Travis CI build is in progress
Details
Branch target Branch target is correct
Details
DCO All commits signed-off
Details
Testsuite Build finished.
Details
continuous-integration/appveyor/pr AppVeyor build succeeded
Details
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Linked issues

Successfully merging this pull request may close these issues.

None yet

3 participants
You can’t perform that action at this time.