Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

document and smooth the CA experience #149

Closed
hannesm opened this issue Feb 9, 2023 · 1 comment
Closed

document and smooth the CA experience #149

hannesm opened this issue Feb 9, 2023 · 1 comment

Comments

@hannesm
Copy link
Collaborator

hannesm commented Feb 9, 2023

related is #52 (for adjusting / decreasing the resources for a specific person)

@TheLortex tried to use the remote-tls endpoint and the albatross-client-remote-tls. Noteworthy things:

  • albatross-provision-ca sign of an intermediary (sub)CA is allowed even if there are no CPU -- which is slightly useless
  • it could as well check there to be at least one VM

Also, the albatross-client-remote-tls takes in a (client) certificate and the CA certificate -- but it expects an entire client CA chain and could locally verify that it's a good certificate before connecting to the remote (and transferring the entire unikernel). The "CA sign" could output a bundle instead of a single certifcate (though it may not know the entire chain... if there's more than one level of delegation involved).
@TheLortex TheLortex mentioned this issue Feb 23, 2023
Merged
@hannesm hannesm mentioned this issue Mar 1, 2023
Merged
@hannesm
Copy link
Collaborator Author

hannesm commented Apr 9, 2023

addressed in the mentioned PRs.

@hannesm hannesm closed this as completed Apr 9, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@hannesm