Page MenuHomeDevCentral
Differential D2646

Deploy public and Nasqueron certificates
ClosedPublic
Actions

Authored by dereckson on Mar 29 2022, 22:50.
Tags
None
Referenced Files
F33021373: D2646.id6685.diff
Sun, Jun 14, 09:11
F33015336: D2646.id6690.diff
Sun, Jun 14, 07:31
F33015151: D2646.diff
Sun, Jun 14, 07:28
Unknown Object (File)
Fri, Jun 12, 02:51
Unknown Object (File)
Thu, Jun 11, 06:49
Unknown Object (File)
Wed, Jun 10, 19:57
Unknown Object (File)
Tue, Jun 9, 08:45
Unknown Object (File)
Mon, Jun 1, 09:38
View All Files
Subscribers
None

Details

Reviewers
dereckson
Maniphest Tasks
T923: Switch Vault to restricted network
T928: Deploy Vault to store credentials
Commits
rOPSff57b9fe80ea: Deploy public and Nasqueron certificates
Summary

This change provision:

  • certificates trusted by Mozilla and shipped with Firefox
  • the Nasqueron Vault PKI root CA certificate

To connect to Vault server, and other private network services,
Vault can be used to generate certificates. Ref T923, T928.

Test Plan

Connect to https://172.27.27.7:8200

Diff Detail

Repository
rOPS Nasqueron Operations
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

dereckson requested review of this revision.Mar 29 2022, 22:50
dereckson created this revision.
Harbormaster completed remote builds in B4149: Diff 6685.Mar 29 2022, 22:50
dereckson accepted this revision.Apr 3 2022, 09:39
dereckson added inline comments.
roles/core/certificates/map.jinja
3

Tested on CloudHugger with Python 3 + requests. Works fine.

This revision is now accepted and ready to land.Apr 3 2022, 09:39
Closed by commit rOPSff57b9fe80ea: Deploy public and Nasqueron certificates (authored by dereckson). · Explain WhyApr 3 2022, 09:41
This revision was automatically updated to reflect the committed changes.
dereckson added a commit: rOPSff57b9fe80ea: Deploy public and Nasqueron certificates.

Revision Contents
Changeset List

PathSize
roles/
core/
certificates/
files/
20 lines
45 lines
16 lines
1 line

Diff 6690

View Options

roles/core/certificates/files/nasqueron-vault-ca.crt

Loading...
View Options

roles/core/certificates/init.sls

Loading...
View Options

roles/core/certificates/map.jinja

Loading...
View Options

roles/core/init.sls

Loading...
Nasqueron DevCentral · If it had been much bigger the moon would have had a core of ice. · Powered by Phabricator