A warning will be printed in log if cert expires in less than
30 days.
In addition, fix refcount in cert provider and unit test.
Change-Id: I8899e84c37d56602736b8fb0c1994ad04a5d5b14
When certificate storage is nsx-db and nsx_client_cert_pk_password
is provided in configuration, private key will be stored encrypted.
Change-Id: Id0e6f3b614da9eb2381c80d1a76043e38d2d11ee
Client certificate authentication is disabled by default.
To enable client auth, define the following in nsx.ini:
nsx_use_client_auth = True
nsx_client_cert_storage = nsx-db
nsx_client_cert_file = <file to store certificate and private key>
To enable client auth in devstack, define the following in local.conf:
NSX_USE_CLIENT_CERT_AUTH=True
This commit covers only DB type of cert storage. Barbican storage
and imported cert will be added later. Also planned for near future:
reload cert from DB if NSX connection failes due to bad cert
show warning when cert nears expiration
delete cert file from file system on neutron exit
Change-Id: Ic70a949b740d9149d71187b02640d3071a3e0159
Gary Kotton
Anna Khmelnitsky