Change in ovirt-hosted-engine-setup[master]: pki: acquiring certs from pki-resource servlet

sbonazzo at redhat.com sbonazzo at redhat.com
Tue Oct 20 14:35:18 UTC 2015


Sandro Bonazzola has submitted this change and it was merged.

Change subject: pki: acquiring certs from pki-resource servlet
......................................................................


pki: acquiring certs from pki-resource servlet

In the past CA cert was available at
http://{fqdn}/ca.crt but now the engine responds 404.
- Moving to pki-resource servlet.
- Showing CA info to the user
- Downloading engine SSH pubkey via trusted https
- Better check of SSH pubkey duplicates

Change-Id: Ia4b5e8ffdc598afaacadd5c4ba8952659efdaa98
Bug-Url: https://bugzilla.redhat.com/1256467
Bug-Url: https://bugzilla.redhat.com/1059952
Bug-Url: https://bugzilla.redhat.com/1254838
Signed-off-by: Simone Tiraboschi <stirabos at redhat.com>
---
M src/ovirt_hosted_engine_setup/Makefile.am
M src/ovirt_hosted_engine_setup/constants.py
A src/ovirt_hosted_engine_setup/ohttpshandler.py
A src/ovirt_hosted_engine_setup/pkissh.py
M src/plugins/ovirt-hosted-engine-setup/engine/add_disk.py
M src/plugins/ovirt-hosted-engine-setup/engine/add_host.py
6 files changed, 524 insertions(+), 85 deletions(-)

Approvals:
  Sandro Bonazzola: Looks good to me, approved
  Simone Tiraboschi: Verified
  Jenkins CI: Passed CI tests
  Yedidyah Bar David: Looks good to me, but someone else must approve



-- 
To view, visit https://gerrit.ovirt.org/45270
To unsubscribe, visit https://gerrit.ovirt.org/settings

Gerrit-MessageType: merged
Gerrit-Change-Id: Ia4b5e8ffdc598afaacadd5c4ba8952659efdaa98
Gerrit-PatchSet: 38
Gerrit-Project: ovirt-hosted-engine-setup
Gerrit-Branch: master
Gerrit-Owner: Simone Tiraboschi <stirabos at redhat.com>
Gerrit-Reviewer: Jenkins CI
Gerrit-Reviewer: Lev Veyde <lveyde at redhat.com>
Gerrit-Reviewer: Sandro Bonazzola <sbonazzo at redhat.com>
Gerrit-Reviewer: Simone Tiraboschi <stirabos at redhat.com>
Gerrit-Reviewer: Yedidyah Bar David <didi at redhat.com>
Gerrit-Reviewer: automation at ovirt.org



More information about the Engine-commits mailing list