Merge pull request #3738 from clumens/certs
9a524a3a8bec
Actions

Description

Merge pull request #3738 from clumens/certs

Add support for authentication via TLS certs to remote CIB operations

Details

Provenance

kgaillot	Authored on Mon, Dec 9, 10:46 AM
GitHub <noreply@github.com>	Committed on Mon, Dec 9, 10:46 AM

Parents

rP20c6c4b17bbd: Doc: Pacemaker Administration: Explain use of TLS certificates.
rPe9503b614d99: Merge pull request #3755 from nrwahl2/nrwahl2-T898

Branches

Unknown

Tags

Unknown

Event Timeline

GitHub <noreply@github.com> committed rP9a524a3a8bec: Merge pull request #3738 from clumens/certs (authored by kgaillot).Mon, Dec 9, 10:46 AM

Merged Changes

20c6c4b17bbd Doc: Pacemaker Administration: Explain use of TLS certificates.
Author
clumens
Browse Repository
No Audits
d4b99f10e845 Feature: libcib: Enable TLS certs for remote CIB operations.
Author
clumens
Browse Repository
No Audits
afdb38a7b7b9 Feature: libs: Log if a TLS certificate is close to expiration.
Author
clumens
Browse Repository
No Audits
0ff89a84b788 Feature: libcrmcommon: If the server supports certs, require them...
Author
clumens
Browse Repository
No Audits
aae93cbcb9c8 Feature: daemons: Set up X509 auth in based if enabled.
Author
clumens
Browse Repository
No Audits
86efd5dd2dc8 Refactor: libcrmcommon: Simplify args to pcmk__new_tls_session.
Author
clumens
Browse Repository
No Audits
d065ccd4631a Refactor: libcrmcommon: Deprecate crm_gnutls_global_init.
Author
clumens
Browse Repository
No Audits
9d90dd7c0b57 Refactor: libs: Use pcmk__tls_t in the client TLS code as well.
Author
clumens
Browse Repository
No Audits
fd05ba32d066 Refactor: libcrmcommon: Add pcmk__tls_t.
Author
clumens
Browse Repository
No Audits
95da79fcc8bf Refactor: libcrmcommon: pcmk__new_tls_session can take a cert cred type.
Author
clumens
Browse Repository
No Audits
57ea342262f8 Feature: libcrmcommon: Add pcmk__x509_enabled.
Author
clumens
Browse Repository
No Audits
96eb4036f95f Refactor: libcrmcommon: Change the type of tls_session...
Author
clumens
Browse Repository
No Audits
701eac03ccd8 Refactor: libs: Move tls-specific code from remote.c to tls.c.
Author
clumens
Browse Repository
No Audits
a141eec64a4d Feature: sysconfig: Add env settings needed for X509 authentication.
Author
clumens
Browse Repository
No Audits
761957896cd2 Refactor: libcrmcommon: Move tls priority detection into a function.
Author
clumens
Browse Repository
No Audits
7539fec5c1d6 Refactor: libcrmcommon: Use our own logging for gnutls.
Author
clumens
Browse Repository
No Audits
40f0c3da72b0 Refactor: libcib: Rearrange cib_remote_signon a bit.
Author
clumens
Browse Repository
No Audits
228c94fa5f29 Refactor: libcib: Unindent code in cib_new.
Author
clumens
Browse Repository
No Audits

Changes (19)

Path

Size

daemons/

based/

based_remote.c

execd/

remoted_tls.c

doc/

sphinx/

Pacemaker_Administration/

configuring.rst

conf.py.in

etc/

sysconfig/

pacemaker.in

include/

crm/

common/

lib/

cib/

common/

lrmd/

rP9a524a3a8bec

View Options

daemons/based/based_remote.c

View Options

daemons/execd/remoted_tls.c

View Options

doc/sphinx/Pacemaker_Administration/configuring.rst

View Options

doc/sphinx/conf.py.in

View Options

etc/sysconfig/pacemaker.in

View Options

include/crm/common/ipc_internal.h

View Options

include/crm/common/options_internal.h

View Options

include/crm/common/remote_internal.h

View Options

include/crm/common/tls_internal.h

View Options

include/crm/common/util.h

View Options

include/crm/common/util_compat.h

View Options

lib/cib/cib_client.c

View Options

lib/cib/cib_remote.c

View Options

lib/common/Makefile.am

View Options

lib/common/ipc_server.c

View Options

lib/common/remote.c

View Options

lib/common/tls.c

View Options

lib/common/utils.c

View Options

Merge pull request #3738 from clumens/certs9a524a3a8becActions

Description

Details

Event Timeline

Merged Changes

Changes (19)

rP9a524a3a8bec

daemons/based/based_remote.c

daemons/execd/remoted_tls.c

doc/sphinx/Pacemaker_Administration/configuring.rst

doc/sphinx/conf.py.in

etc/sysconfig/pacemaker.in

include/crm/common/ipc_internal.h

include/crm/common/options_internal.h

include/crm/common/remote_internal.h

include/crm/common/tls_internal.h

include/crm/common/util.h

include/crm/common/util_compat.h

lib/cib/cib_client.c

lib/cib/cib_remote.c

lib/common/Makefile.am

lib/common/ipc_server.c

lib/common/remote.c

lib/common/tls.c

lib/common/utils.c

lib/lrmd/lrmd_client.c

Merge pull request #3738 from clumens/certs
9a524a3a8bec
Actions