4 Commits

Author SHA1 Message Date
Brian Haley
1c639f01a0 Don't inherit enforcing bash errexit in devstack plugin
The devstack plugin code was sourcing a file that was
enabling bash errexit, which was then inheriting it in
later operations that could cause the shell to exit
unexpectedly.

Change both scripts to 'set +e' near exit so sourcing
them doesn't have issues.

Change-Id: I16513b0066c05cd6fc606da341df636094010a34
2020-04-15 10:10:34 -04:00
Gregory Thiemonge
8b6bb936d3 Use 2048-bits keys for devstack certificates
RHEL8 and Centos8 refuse to load certificates generated with a 1024-bits
key because of new security policies. Increasing key size to 2048-bits
fixes certificate generation scripts for these distributions.

Story 2006944
Task 37623

Change-Id: I6d5d39c4cf87ac687355f80ca591c1a611f46f41
2019-11-27 11:49:41 +01:00
Gregory Thiemonge
c7f4b4a9db Fix certificate directory creation
When calling ./stack.sh twice, octavia devstack plugin fails because
local certificate directory already exists.

This commit deletes the directory each time a certificate creation
script is called and when the user cleans up his devstack's
installation.

Change-Id: I21dfffa9b30274fa0fa9f365a88222b8f4c89e29
2019-09-27 09:40:08 +02:00
Michael Johnson
950faea6e9 Use dual intermediate CAs for devstack
This patch updates the devstack plugin to use a dual Certificate
Authority (CA) with intermediate CAs for the Octavia controller
deployment.
This is a more realistic deployment model for testing.
Note: This change uses weak security to save gate resources. Please
refer to the Octavia Certificate Configuration Guide for production
instructions.

Change-Id: I3ec135766c9a1ddb7ac6655c0ee1ccb1e78ead5c
2019-08-27 16:28:12 -07:00