Oved Ourfali has submitted this change and it was merged.
Change subject: uutil: add universal ticketing utilities
......................................................................
uutil: add universal ticketing utilities
base is the websocket proxy ticket, with symmetric operations in both
java and python.
a new certificate field was added to allow x509 trust with eku without
need to specify certificate at decoder.
removal of insecure mode as not required after bootstrapping the
feature.
library is useful for:
1. websocket proxy
2. serial console proxy
3. sso
Change-Id: Ibc87ea4a4ea540dfea09e40f4396d6918e34e019
Signed-off-by: Alon Bar-Lev <alonbl(a)redhat.com>
---
M
backend/manager/modules/bll/src/main/java/org/ovirt/engine/core/bll/SignStringQuery.java
D
backend/manager/modules/utils/src/main/java/org/ovirt/engine/core/utils/crypt/TicketUtils.java
M backend/manager/modules/uutils/exclude-filters.xml
M backend/manager/modules/uutils/pom.xml
A
backend/manager/modules/uutils/src/main/java/org/ovirt/engine/core/uutils/crypto/ticket/TicketDecoder.java
A
backend/manager/modules/uutils/src/main/java/org/ovirt/engine/core/uutils/crypto/ticket/TicketEncoder.java
M
backend/manager/modules/uutils/src/main/modules/org/ovirt/engine/core/uutils/main/module.xml
A
backend/manager/modules/uutils/src/test/java/org/ovirt/engine/core/uutils/crypto/ticket/TicketTest.java
A backend/manager/modules/uutils/src/test/resources/ticket/ca1.jks
A backend/manager/modules/uutils/src/test/resources/ticket/ca1test1.p12
A backend/manager/modules/uutils/src/test/resources/ticket/ca1test2.p12
A backend/manager/modules/uutils/src/test/resources/ticket/ca2.jks
M ovirt-engine.spec.in
A packaging/pythonlib/ovirt_engine/ticket.py
M packaging/services/ovirt-websocket-proxy/ovirt-websocket-proxy.conf.in
M packaging/services/ovirt-websocket-proxy/ovirt-websocket-proxy.py
M packaging/setup/plugins/ovirt-engine-setup/websocket_proxy/config.py
17 files changed, 548 insertions(+), 174 deletions(-)
Approvals:
Alon Bar-Lev: Verified
Sandro Bonazzola: Looks good to me, but someone else must approve
Oved Ourfali: Looks good to me, approved
--
To view, visit
http://gerrit.ovirt.org/36401
To unsubscribe, visit
http://gerrit.ovirt.org/settings
Gerrit-MessageType: merged
Gerrit-Change-Id: Ibc87ea4a4ea540dfea09e40f4396d6918e34e019
Gerrit-PatchSet: 8
Gerrit-Project: ovirt-engine
Gerrit-Branch: master
Gerrit-Owner: Alon Bar-Lev <alonbl(a)redhat.com>
Gerrit-Reviewer: Alon Bar-Lev <alonbl(a)redhat.com>
Gerrit-Reviewer: Frank Kobzik <fkobzik(a)redhat.com>
Gerrit-Reviewer: Oved Ourfali <oourfali(a)redhat.com>
Gerrit-Reviewer: Ravi Nori <rnori(a)redhat.com>
Gerrit-Reviewer: Sandro Bonazzola <sbonazzo(a)redhat.com>
Gerrit-Reviewer: Simone Tiraboschi <stirabos(a)redhat.com>
Gerrit-Reviewer: Vitor de Lima <vdelima(a)redhat.com>
Gerrit-Reviewer: Yedidyah Bar David <didi(a)redhat.com>
Gerrit-Reviewer: automation(a)ovirt.org
Gerrit-Reviewer: oVirt Jenkins CI Server