Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add a module for managing certificates in the HMC #401

Open
andy-maier opened this issue May 19, 2021 · 2 comments
Open

Add a module for managing certificates in the HMC #401

andy-maier opened this issue May 19, 2021 · 2 comments

Comments

@andy-maier
Copy link
Member

andy-maier commented May 19, 2021

See Slack channel.

@andy-maier
Copy link
Member Author

Currently, the HMC does not provide any APIs for that.

andy-maier added a commit that referenced this issue Jun 8, 2021
Details:

* Added module parameters 'ca_certs' and 'verify' to all modules
  (issue #401)

Signed-off-by: Andreas Maier <[email protected]>
@andy-maier andy-maier linked a pull request Jun 8, 2021 that will close this issue
andy-maier added a commit that referenced this issue Jun 8, 2021
Details:

* Added module parameters 'ca_certs' and 'verify' to all modules
  (issue #401)

Signed-off-by: Andreas Maier <[email protected]>
andy-maier added a commit that referenced this issue Jun 8, 2021
Details:

* Added module parameters 'ca_certs' and 'verify' to all modules
  (issue #401)

* Increased minimum version of zhmcclient to 0.31.0 in order to have
  the support for certificate verification.

Signed-off-by: Andreas Maier <[email protected]>
andy-maier added a commit that referenced this issue Jun 8, 2021
Details:

* Added module parameters 'ca_certs' and 'verify' to all modules
  (issue #401)

* Increased minimum version of zhmcclient to 0.31.0 in order to have
  the support for certificate verification.

Signed-off-by: Andreas Maier <[email protected]>
andy-maier added a commit that referenced this issue Jun 8, 2021
Details:

* Added module sub-parameters 'ca_certs' and 'verify' to the 'hmc_auth'
  module parameter of all modules. (issue #401)

* Changed module input parameter 'hmc_auth.userid' to no longer be
  hidden in logs, for better debugging. The password is still
  hidden in any logs.

* Increased minimum version of zhmcclient to 0.31.0 in order to have
  the support for certificate verification.

Signed-off-by: Andreas Maier <[email protected]>
andy-maier added a commit that referenced this issue Jun 8, 2021
Details:

* Added module sub-parameters 'ca_certs' and 'verify' to the 'hmc_auth'
  module parameter of all modules. (issue #401)

* Changed module input parameter 'hmc_auth.userid' to no longer be
  hidden in logs, for better debugging. The password is still
  hidden in any logs.

* Increased minimum version of zhmcclient to 0.31.0 in order to have
  the support for certificate verification.

Signed-off-by: Andreas Maier <[email protected]>
vkathir82 pushed a commit that referenced this issue Jun 9, 2021
Details:

* Added module sub-parameters 'ca_certs' and 'verify' to the 'hmc_auth'
  module parameter of all modules. (issue #401)

* Changed module input parameter 'hmc_auth.userid' to no longer be
  hidden in logs, for better debugging. The password is still
  hidden in any logs.

* Increased minimum version of zhmcclient to 0.31.0 in order to have
  the support for certificate verification.

Signed-off-by: Andreas Maier <[email protected]>
@andy-maier andy-maier added this to the 1.1.0 milestone Apr 9, 2022
@andy-maier andy-maier modified the milestones: 1.1.0, 1.2.0 May 17, 2022
@andy-maier andy-maier removed this from the 1.2.0 milestone Jun 26, 2022
@andy-maier andy-maier removed their assignment Jan 12, 2024
@andy-maier andy-maier changed the title Add a module for managing security certificates in the HMC Add a module for managing certificates in the HMC Jan 13, 2024
@andy-maier
Copy link
Member Author

As of HMC 2.16, certificates of type "secure-boot" can be managed. This makes it worthwhile to add a module for managing certificates. The module should be generic enough so that future certificate types can also be managed.

@andy-maier andy-maier added this to the 1.9.0 milestone Jan 13, 2024
@andy-maier andy-maier modified the milestones: 1.9.0, 1.10.0 Jun 27, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant