Merge pull request #3758 from clumens/certs-3.0
4143eb814a50
Actions

Description

Merge pull request #3758 from clumens/certs-3.0

Port TLS certs for remote CIB ops to 3.0

Details

Provenance

kgaillot	Authored on Dec 10 2024, 10:41 AM
GitHub <noreply@github.com>	Committed on Dec 10 2024, 10:41 AM

Parents

rP7b68062f60d9: Doc: Pacemaker Administration: Explain use of TLS certificates.
rPe1a48fb64a58: Merge pull request #3754 from nrwahl2/nrwahl2-backport

Branches

Unknown

Tags

Unknown

Event Timeline

GitHub <noreply@github.com> committed rP4143eb814a50: Merge pull request #3758 from clumens/certs-3.0 (authored by kgaillot).Dec 10 2024, 10:41 AM

Merged Changes

7b68062f60d9 Doc: Pacemaker Administration: Explain use of TLS certificates.
Author
clumens
Browse Repository
No Audits
a0b3f9b4db27 Feature: libcib: Enable TLS certs for remote CIB operations.
Author
clumens
Browse Repository
No Audits
aa316e38478e Feature: libs: Log if a TLS certificate is close to expiration.
Author
clumens
Browse Repository
No Audits
2be15a9b855c Feature: libcrmcommon: If the server supports certs, require them...
Author
clumens
Browse Repository
No Audits
59c08d106797 Feature: daemons: Set up X509 auth in based if enabled.
Author
clumens
Browse Repository
No Audits
04131210a439 Refactor: libcrmcommon: Simplify args to pcmk__new_tls_session.
Author
clumens
Browse Repository
No Audits
9ab22792c134 Refactor: libcrmcommon: Deprecate crm_gnutls_global_init.
Author
clumens
Browse Repository
No Audits
096b1ddfa85b Refactor: libs: Use pcmk__tls_t in the client TLS code as well.
Author
clumens
Browse Repository
No Audits
8aff17b1a7a3 Refactor: libcrmcommon: Add pcmk__tls_t.
Author
clumens
Browse Repository
No Audits
08ddc29b0de1 Refactor: libcrmcommon: pcmk__new_tls_session can take a cert cred type.
Author
clumens
Browse Repository
No Audits
b59141d075db Feature: libcrmcommon: Add pcmk__x509_enabled.
Author
clumens
Browse Repository
No Audits
5984f0f6d2f7 Refactor: libcrmcommon: Change the type of tls_session...
Author
clumens
Browse Repository
No Audits
72f51f51b7fd Refactor: libs: Move tls-specific code from remote.c to tls.c.
Author
clumens
Browse Repository
No Audits
c9fc1ddee0f9 Feature: sysconfig: Add env settings needed for X509 authentication.
Author
clumens
Browse Repository
No Audits
49c4e87cf251 Refactor: libcrmcommon: Move tls priority detection into a function.
Author
clumens
Browse Repository
No Audits
b050f0155257 Refactor: libcrmcommon: Use our own logging for gnutls.
Author
clumens
Browse Repository
No Audits
71a71004103c Refactor: libcib: Rearrange cib_remote_signon a bit.
Author
clumens
Browse Repository
No Audits
fb7a6c4a1ec3 Refactor: libcib: Unindent code in cib_new.
Author
clumens
Browse Repository
No Audits

Changes (19)

Path

Size

daemons/

based/

based_remote.c

execd/

remoted_tls.c

doc/

sphinx/

Pacemaker_Administration/

configuring.rst

conf.py.in

etc/

sysconfig/

pacemaker.in

include/

crm/

common/

lib/

cib/

common/

lrmd/

rP4143eb814a50

View Options

daemons/based/based_remote.c

View Options

daemons/execd/remoted_tls.c

View Options

doc/sphinx/Pacemaker_Administration/configuring.rst

View Options

doc/sphinx/conf.py.in

View Options

etc/sysconfig/pacemaker.in

View Options

include/crm/common/ipc_internal.h

View Options

include/crm/common/options_internal.h

View Options

include/crm/common/remote_internal.h

View Options

include/crm/common/tls_internal.h

View Options

include/crm/common/util.h

View Options

include/crm/common/util_compat.h

View Options

lib/cib/cib_client.c

View Options

lib/cib/cib_remote.c

View Options

lib/common/Makefile.am

View Options

lib/common/ipc_server.c

View Options

lib/common/remote.c

View Options

lib/common/tls.c

View Options

lib/common/utils.c

View Options

Merge pull request #3758 from clumens/certs-3.04143eb814a50Actions

Description

Details

Event Timeline

Merged Changes

Changes (19)

rP4143eb814a50

daemons/based/based_remote.c

daemons/execd/remoted_tls.c

doc/sphinx/Pacemaker_Administration/configuring.rst

doc/sphinx/conf.py.in

etc/sysconfig/pacemaker.in

include/crm/common/ipc_internal.h

include/crm/common/options_internal.h

include/crm/common/remote_internal.h

include/crm/common/tls_internal.h

include/crm/common/util.h

include/crm/common/util_compat.h

lib/cib/cib_client.c

lib/cib/cib_remote.c

lib/common/Makefile.am

lib/common/ipc_server.c

lib/common/remote.c

lib/common/tls.c

lib/common/utils.c

lib/lrmd/lrmd_client.c

Merge pull request #3758 from clumens/certs-3.0
4143eb814a50
Actions