Add new stack certificate authority based on new CA implemetation
The CA python egg is here: https://lab.nexedi.com/vpelletier/caucase instance-certificate-authority.cfg.jinja2.in deploy a CA server which expose an API on HTTP, all request are done using GET, PUT, DELETE and POST on that API. CA server use ngix + gunicorn (for wsgi) Auth server is an apache httpd which validate client certificate for authentification. It autmatically request a signed certificate to CA and use it in apache configuration. client request will be validated using: SSLVerifyClient require in apache config The CA expose two URL: ${certificate-authority-server:url} which is https URL used to access admin interface ${certificate-authority-server:insecure-url} is the HTTP url which can be used to post csr and download certificate
Showing
| # THIS IS NOT A BUILDOUT FILE, despite purposedly using a compatible syntax. | ||
| # The only allowed lines here are (regexes): | ||
| # - "^#" comments, copied verbatim | ||
| # - "^[" section beginings, copied verbatim | ||
| # - lines containing an "=" sign which must fit in the following categorie. | ||
| # - "^\s*filename\s*=\s*path\s*$" where "path" is relative to this file | ||
| # But avoid directories, they are not portable. | ||
| # Copied verbatim. | ||
| # - "^\s*hashtype\s*=.*" where "hashtype" is one of the values supported | ||
| # by the re-generation script. | ||
| # Re-generated. | ||
| # - other lines are copied verbatim | ||
| # Substitution (${...:...}), extension ([buildout] extends = ...) and | ||
| # section inheritance (< = ...) are NOT supported (but you should really | ||
| # not need these here). | ||
| [template-httpd-auth-conf] | ||
| md5sum = ea445b0a9b143d12b5700a71ac06293c | ||
| filename = template-httpd-auth.conf.in | ||
|
||
| [template-nginx-ca-conf] | ||
| md5sum = d8bebf1629aacffd619541f363687b4a | ||
| filename = ca-nginx.conf.in | ||
|
||
| [template-authenticated-server] | ||
| filename = template-authenticated-server.cfg | ||
|
||
| md5sum = a317d2f948cd3d16c860d05cc07ecf42 | ||
| [template-certificate-authority] | ||
| filename = template-certificate-authority.cfg | ||
|
||
| md5sum = e097dab69a38e428600b171ce2f6d68c | ||
| \ No newline at end of file | ||