x
/
vmware-nsxlib
Code Issues Proposed changes
130 Commits
22 Branches
32 Tags
15 MiB
stable/victoria-321
stable/release-411
stable/xena-410
master
stable/train
stable/victoria-320
stable/xena-400
stable/xena
stable/xena-401
stable/ussuri
stable/victoria
ussuri-test
stable/victoria-311
stable/victoria-312
stable/ussuri-310
ussuri-16.0.6
stable/stein
stable/stein-plus
stable/queens
stable/rocky
stable/ocata
stable/pike
17.4.7
19.3.1
19.2.4
17.4.6
17.4.5
19.3.0
17.4.4
19.0.5
19.2.3
19.0.4
19.2.2
19.2.1
19.2.0
19.1.3
19.1.2
19.1.1
19.1.0
15.2.0
16.3.0
19.0.3
19.0.2
19.0.1
19.0.0
17.4.3
17.4.2
17.4.1
17.4.0
17.3.4
17.3.3
17.3.2
17.3.1
16.2.0
17.3.0
17.2.5
17.2.4
17.1.4
17.2.3
17.2.2
17.1.3
17.1.2
17.2.1
17.2.0
17.1.1
15.1.0
14.0.5.1
17.1.0
17.0.0
16.1.3
16.1.2
16.1.1
16.1.0
16.0.8
16.0.7
14.0.6
16.0.6
16.0.5
16.0.4
16.0.3
16.0.2
16.0.1
16.0.0
15.0.7
15.0.6
15.0.5
15.0.4
15.0.3
14.0.4.1
14.0.5
15.0.2
15.0.1
15.0.0
14.0.4
14.0.3
14.0.2
14.0.1
14.0.0
13.1.0
13.0.2
13.0.1
13.0.0
13.0.0.0
12.1.1
12.0.4
11.0.3
10.0.3
11.0.2
12.1.0
12.0.3
12.0.2
12.0.1
12.0.0.0rc1
12.0.0
11.1.4
11.1.3
11.1.2
11.1.1
11.0.1
10.0.2
11.1.0.a1
11.1.0
11.0.0
10.1.2
10.1.1
10.0.1
10.1.0.a1
10.0.0
0.7.3
0.7.2
0.7.1
0.7.0
0.6.0
0.5.0
0.4.0
0.3.0
0.2.0
0.1.0
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from '66298bf169'
${ noResults }
Commit Graph

4 Commits (66298bf16999b389b8628735070a2c174425219c)

Author SHA1 Message Date
Anna Khmelnitsky 1ac9c11b03 Support multiple client certificate per identity 
When openstack runs in HA mode, admin might choose to assign two
separate client certificates for each openstack host. This is
possible with storage_type=none. This change allows deleting cert
and identity based not only on identity name, but on cert pem.
In addition, allow faster cluster recovery in case of certificate
change.

Change-Id: Ia4eea874cfa2bf4befc724b719e53e936292e11f
 6 years ago
Salvatore Orlando ff8a2044e0 Pass node ID and user permissions when creating NSX identity 
Ths patch simply adds 3 attributes to the request body sent to NSX
when creating principal identities for certificates, adjusts the
code in vmware_nsxlib.v3.client_cert accordingly, and removes
code that was based on "single cert per identity" assumtion.

Change-Id: Ib4e1f44e98843d7cb308c57434e3ecc68f7b8dc2
 6 years ago
Anna Khmelnitsky 763f024ab8 Support client certificate import 
In addition, add getters for certificate fields,
and ensure certificate object has short lifespan, since
it might change in storage

Change-Id: I2abbec0e48d82d432c9cc18afaca62bae7558d7c
 6 years ago
Anna Khmelnitsky e8ef5db4e9 Client certificate management for NSXV3 authentication 
Client certificate authentication will replace basic authentication.
A single client certificate will be generated by admin for the
configuration agent (openstack, container,..).

This commit focuses on certificate generation and coordination of
certificate management on backend, storage and in the agent itself.

Change-Id: Ib00e2c00aecb53cec63a746e9db6829a5594eb3a
 6 years ago