-
Notifications
You must be signed in to change notification settings - Fork 42
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Test cert setup #1053
Test cert setup #1053
Conversation
25aa99b
to
e3171af
Compare
7e8002c
to
f0ae07b
Compare
f0ae07b
to
5517ba9
Compare
This sets up nginx to accept client certificates and provides a matching client certificate with DN=admin.
5517ba9
to
5e0dc4d
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Some questions before I approve.
python3 "${BASEPATH}/gen_certs.py" -d "${PULP_CLI_TEST_TMPDIR}/settings/certs" | ||
export PULP_CA_BUNDLE="${PULP_CLI_TEST_TMPDIR}/settings/certs/ca.pem" | ||
ln -fs server.pem "${PULP_CLI_TEST_TMPDIR}/settings/certs/pulp_webserver.crt" | ||
ln -fs server.key "${PULP_CLI_TEST_TMPDIR}/settings/certs/pulp_webserver.key" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I'm confused on how these links find the right files. I though the server.pem and server.key are being stored in PULP_CLI_TEST_TMPDIR/settings/certs
, what directory are the ln
commands running from?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
It's confusing yes. But the first parameter is the relative path the link gets, so in the end the files and the links land in the same directory, while the PWD of the ln
command can be anything.
@@ -1,4 +1,3 @@ | |||
ALLOWED_EXPORT_PATHS = ["/tmp"] | |||
ORPHAN_PROTECTION_TIME = 0 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Are we sure this isn't going to break some tests?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Sure? Well we put it in a loooong time ago as a stop gap. I don't think we do that in the repositories CI anymore.
No description provided.