Change in ovirt-reports[master]: packaging: retrieve trust certificate from engine's ssl

ydary at redhat.com ydary at redhat.com
Thu Mar 14 13:11:03 UTC 2013


Yaniv Dary has submitted this change and it was merged.

Change subject: packaging: retrieve trust certificate from engine's ssl
......................................................................


packaging: retrieve trust certificate from engine's ssl

Currently the implementation assume that the internal certificate
authority is used to perform SSL, this is incorrect.

New implementation fetches the certificate chain from the engine ssl
session.

The utility ssl2jkstrust.py can be used to re-fetch if needed after
setup.

Not sure why we cannot perform SSO based on shared secret or database
OTP, which will make it much simpler to implement than current
implementation.

Change-Id: I64ab90925eabb3cf1c43c39693dfb082400c8ba4
Signed-off-by: Alon Bar-Lev <alon.barlev at gmail.com>
---
M Makefile
M packaging/ovirt-engine-reports-setup.py
M packaging/ovirt-engine-reports.spec.in
A packaging/ssl2jkstrust.py
4 files changed, 150 insertions(+), 3 deletions(-)

Approvals:
  Yaniv Dary: Verified; Looks good to me, approved


--
To view, visit http://gerrit.ovirt.org/12740
To unsubscribe, visit http://gerrit.ovirt.org/settings

Gerrit-MessageType: merged
Gerrit-Change-Id: I64ab90925eabb3cf1c43c39693dfb082400c8ba4
Gerrit-PatchSet: 2
Gerrit-Project: ovirt-reports
Gerrit-Branch: master
Gerrit-Owner: Alon Bar-Lev <alonbl at redhat.com>
Gerrit-Reviewer: Alon Bar-Lev <alonbl at redhat.com>
Gerrit-Reviewer: Juan Hernandez <juan.hernandez at redhat.com>
Gerrit-Reviewer: Yaniv Dary <ydary at redhat.com>



More information about the Engine-commits mailing list