particle-os/debian-forge-composer
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
debian-forge-composer/cmd
History
Ondřej Budai 5b57814664 api/worker, koji: change CA logic for client certificates 
Prior this commit, /etc/osbuild-composer/ca-crt.pem certificate was
used as an authority to validate client certificates.

After this commit, the host's trusted certificates are used to do
the validation. Ability to override this behaviour is also introduced:

In osbuild-composer config file, under koji and worker sections, a new CA
option is now available. If set, osbuild-composer uses it as a path
to certificate used to validate client certificates instead of the
default ones.

With this feature, it's possible to restore the validation behaviour
used before this change. Just put following lines in
/etc/osbuild-composer/osbuild-composer.toml:

[koji]
ca = "/etc/osbuild-composer/ca-crt.pem"

[worker]
ca = "/etc/osbuild-composer/ca-crt.pem"
2020-09-23 11:08:21 +01:00
..
osbuild-auth-tests tests: introduce auth tests 2020-09-23 11:08:21 +01:00
osbuild-composer api/worker, koji: change CA logic for client certificates 2020-09-23 11:08:21 +01:00
osbuild-composer-cloud osbuild-composer-cloud: introduce the cloud-specific service 2020-09-22 11:38:28 +02:00
osbuild-composer-cloud-tests osbuild-composer-cloud: introduce the cloud-specific service 2020-09-22 11:38:28 +02:00
osbuild-dnf-json-tests distro: replace BasePackages() with Packages() 2020-06-29 16:04:38 +02:00
osbuild-image-tests tests: print SSH error for more info. Refs #987 2020-09-22 16:03:30 +02:00
osbuild-koji upload/koji: don't pass task_id to cg_init_build 2020-09-16 00:15:02 +01:00
osbuild-pipeline distro: replace BasePackages() with Packages() 2020-06-29 16:04:38 +02:00
osbuild-store-dump distro: replace BasePackages() with Packages() 2020-06-29 16:04:38 +02:00
osbuild-tests tests: Add reproducer for #524 2020-06-26 22:02:46 +02:00
osbuild-upload-aws Refactor Azure upload code to a separate package 2019-11-27 12:14:07 +01:00
osbuild-upload-azure cmd/osbuild-upload-azure: improve error message on wrong arguments 2020-04-27 20:34:20 +02:00
osbuild-worker koji: add config files to configure kerberos settings 2020-09-16 00:15:02 +01:00