Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

EST generate SSL certificate #4863

Merged
merged 3 commits into from
Sep 30, 2024

Conversation

fmarco76
Copy link
Member

EST integration in pkispawn has been modified to perform its operations during the corresponding steps of other subsystem. Additionally, if the SSL certificate is not provided then it will be created. To create the certificate the EST user credentials and relative profile is used.
The CI test for EST in a separate instance, which use ssl certificate from a pkcs12 bundle, has been moved to a new test while the original has been modified to generate the SSL certificate.

Key name for sslserver was not correctly configured in server.xml.
Additionally, the EST setup operations have been moved to match the
operation done for the other subsystem.
After modifying the EST installation with pkispawn there are several
differences in the generated files which are verified in the CI tests.
pkispawn will create the sslserver certificate for EST if it is not
provided with a PKCS12 bundle containing the certificate.

To generate the certificate the EST user credentials and profile are
used so these should be configured in the CA before EST installation.
Copy link

sonarcloud bot commented Sep 27, 2024

Copy link
Contributor

@edewata edewata left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@fmarco76
Copy link
Member Author

@edewata Thanks!

@fmarco76 fmarco76 merged commit eddb83b into dogtagpki:master Sep 30, 2024
158 of 165 checks passed
@fmarco76 fmarco76 deleted the EST_generate_certs_users branch September 30, 2024 08:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants