Age | Commit message (Collapse) | Author | Files | Lines |
|
Lakshminarayana R. Kammath (1):
unit-test: Enable unit test coverage for certificate manager
(From meta-phosphor rev: bdcb6d93331ce31fc5e1eddc57aff868e48aa211)
Change-Id: I8493c5f7f1c3e9bfd40884a3cf169e54a996c2fd
Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
Signed-off-by: Andrew Geissler <geissonator@yahoo.com>
|
|
sdbusplus has changed the package layout so that sdbusplus-native and
sdbus++-native are now ${PYTHON_PN}-sdbus++-native. Update recipes
that need to use sdbus++ (or its associated python modules) or remove
the DEPENDS if it is no longer necessary.
(From meta-phosphor rev: 2bebd1247cb78567441158b152c7a13f476afd4f)
Signed-off-by: Patrick Williams <patrick@stwcx.xyz>
Change-Id: I30f9c2220da9145ef0a7067e067aed1396d8b40d
Signed-off-by: Andrew Geissler <geissonator@yahoo.com>
|
|
Marri Devender Rao (2):
Fix application crash issue with uncaught exception
Return error if certificate expiry date is beyond year 2038
(From meta-phosphor rev: dc1f6b14f8bbc4667c6e5e90f3cc8bf4360bd795)
Change-Id: I37b7927a7cc8ae16de1f450f3abf49b457e60c46
Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
Signed-off-by: Andrew Geissler <geissonator@yahoo.com>
|
|
Fixes openbmc/openbmc#3645.
(From meta-phosphor rev: d81e4abb0e9448b0011a3896a6d12b315a29e142)
Signed-off-by: Patrick Williams <patrick@stwcx.xyz>
Change-Id: Ia3874a6fac9430c8321dc6f4050cd8b5e68c8e53
Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>
|
|
Marri Devender Rao (1):
Remove some traces logged as part of application load.
(From meta-phosphor rev: 6e89a809206b2a18785f40e85f22c07f519d2c44)
Change-Id: I9522171107d7b296de27edf9d678b5ddec9ef9ef
Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>
|
|
Zbigniew Lukwinski (1):
Change InternalFailure to NotAllowed for replace
(From meta-phosphor rev: 612f430c3d54722d38d398589544ebfdc701c331)
Change-Id: I0b5f79b51c350cfb79ac0517cedcbfda070b94a1
Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>
|
|
Zbigniew Lukwinski (2):
Refactoring of certificates managing and storing
Installing certificates with the same subject name.
(From meta-phosphor rev: 2bb4dddc90fa524af0c74edb80cbeef58cab55c7)
Change-Id: Id1c9662145707a08b6c1bb950156216896206a45
Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>
|
|
Zbigniew Lukwinski (1):
Limit access permissions for authority cert directory.
(From meta-phosphor rev: 4fbae2f0c26a1975d490c5b0ba46558ee73e6d4a)
Change-Id: Idf2e346f5559b69ea406feb3cc636a9d1542cd63
Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>
|
|
Marri Devender Rao (1):
Allow only root user to access certificates
(From meta-phosphor rev: 233336b0d6c78014d84440341c912febd571b6ee)
Change-Id: Iddfcc26466986469dc85fb558acf04a920ea24d6
Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>
|
|
Kowalski, Kamil (1):
Support uploading multiple certificates per authority service.
Zbigniew Kurzynski (1):
Certificate delete API – backend.
Zbigniew Lukwinski (1):
Enable limiting authority certificates amount.
(From meta-phosphor rev: cd2069fb3901fa57307e521d5470a643995587bd)
Change-Id: Id228b88744f9bd2dc08c2fdb60ee6375c045cf54
Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>
|
|
Since the certificate manager can support multiple certificates
the CERTPATH for mode=authentication will be changed to directory.
This change depends on anothere review, see Depends-On tag.
Becase the TrustStore will be used by TLS authentication,
any operation on certificates should result in bmcweb restart, that
is why #Units to restart entry is added.
Since update procedure will not replace configuration file in /etc
all configuration files for the certificate-manager will be deployed
in /usr/share/phosphor-certificate-manager.
(From meta-phosphor rev: 0c09ff71d089c614b14d076d933e849f2f74281e)
Signed-off-by: Zbigniew Kurzynski <zbigniew.kurzynski@intel.com>
Change-Id: Ib7f4ba60760ab8cd1ac647bc51dadf50af7fedc7
Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>
|
|
phosphor-certificate-manager - srcrev bump 262ac2439d..06a69d7b
Zbigniew Kurzynski (1)
Support uploading multiple certificates [install-backend]
phosphor-dbus-interfaces - srcrev bump 262ac2439d..7aa705a935
AppaRao Puli (1):
Interface for defining PFR related properties
Ravi Teja (1):
Network: add fallback option for LinkLocalAddressing property
Richard Marian Thomaiyar (1):
D-Bus: User: Make AllGroups & AllPriv as const
Zbigniew Kurzynski (1):
Support uploading multiple certificates. [install-interface]
(From meta-phosphor rev: 86cb86f8973fb87d88f613137934904ed34ac861)
Signed-off-by: Marri Devender Rao <devenrao@in.ibm.com>
Change-Id: Ia97a046ae7c14228da9cc738d46f07bc97312cf4
Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>
|
|
PHOSPHORBASE is only used for pointing at licenses...point at the
licenses in oe-core in meta/files/common-licenses instead. to match the
defacto convention used in other oe layers like meta-openembedded.
(From meta-phosphor rev: a1cee09419cb1467c3d2b7bf996b40089f0d06f4)
Change-Id: If136d24638a8022671988cf0a01620e7fffc545f
Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>
|
|
Marri Devender Rao (2):
Fix extended key usage value while generating CSR
Fixed error message logged for certificate verification
(From meta-phosphor rev: fbd01b6e080d712ea8c8bca20dc1730e2f792183)
Change-Id: Icdaae4750908f61f5c88914cc364b038334a5782
Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>
|
|
Marri Devender Rao (1):
Fix certificate manager failure after factory reset
(From meta-phosphor rev: 0748a5e9f080ed2b237663679bcd75a0927a03a0)
Change-Id: I28078cdc4a48cad82400c81dad4c2ead33097c94
Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
Signed-off-by: Andrew Geissler <geissonator@yahoo.com>
|
|
Marri Devender Rao (1):
Fix upload signed certificate error through GUI
Ramesh Iyyar (1):
Generate RSA Private Key file during application startup
(From meta-phosphor rev: 91343cb2a4d3cd2a518dc4131ab6a4abc83c4c81)
Change-Id: I00b018c572343f043de4fec1f500598d4e20c138
Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>
|
|
Marri Devender Rao (2):
Manage certificates created by applications
Append private key from the system to CA signed certificate
(From meta-phosphor rev: af23b88350d424d57d23d0de0a590630802a2379)
Change-Id: I223d216f8460febed6bc9fe10d29102ffc07289c
Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>
|
|
Ramesh Iyyar (1):
Added support to generate CSR based on ECC approach
(From meta-phosphor rev: 6e4033a91ddd8803be5986e8bb1b4e4c925940f2)
Change-Id: Ied8ed19b9a63b26cf722eeeda9edb4efaa0bfa34
Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>
|
|
Marri Devender Rao (1):
Fix subject property value is set with certificate string
(From meta-phosphor rev: a37d0de134fb4dcf01568fdcdb68ef035936d771)
Change-Id: I4e77f1525ed738464c2a2139fb897474113ed7a5
Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>
|
|
Marri Devender Rao (3):
Pass flag to skip restart of units for certificate object
Return Certificate Signing Request(CSR) contents
Add Generate Key and Certificate Signing Request (CSR)
(From meta-phosphor rev: 079aafc015cb9f58ddecfc7968ed2743c81f80d5)
Change-Id: I34c03dc26bb5f7cf496148a7284e6acd689ee1fb
Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>
|
|
Deepak Kodihalli (1):
Propose Devender as a maintainer
(From meta-phosphor rev: 7a583a1cce05bd12c3696dc5829ed3cf9b547480)
Change-Id: I7277d1b562c13e5fd286a0aab496b9c8d7375aa3
Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>
|
|
For generating CSR sdeventplus library is used for adding child
process id to the event loop, so that parent process gets
callback after the completion of generate csr operation
performed in the child process.
(From meta-phosphor rev: 462e3d22b32c776989519871252a9fa68f73ff5b)
Change-Id: I7f3fde38e44de96924f7c170b975aaeec7bf94e5
Signed-off-by: Marri Devender Rao <devenrao@in.ibm.com>
Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>
|
|
Marri Devender Rao (1):
Implement Replace interface for Certificate objects
(From meta-phosphor rev: c56f1a548214cbc3c38c3bb5c7104ee027774e30)
Change-Id: I3d8c9e9315cc485f48d9a34d8f56ae5b2af5fe6d
Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>
|
|
Added bitbake recipe to instantiate phoshor-certificate-manager
service for bmcweb certificates.
Caters for installing/replacing of bmcweb certificates.
Specifying instance arguments through env file
Tested:
1) Verified phosphor-certificate-manger instance for bmcweb
is running
2) Verified Installing, Replacing of certificates using Redfish
(From meta-phosphor rev: b0e77acb579523dfa706a545c86b1c2469692adc)
Change-Id: Ifb4c8ac7e34f57a652f72eff1a0ef568a6348124
Signed-off-by: Marri Devender Rao <devenrao@in.ibm.com>
Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>
|
|
Marri Devender Rao (1):
Modify unit test cases to cater for Certificate D-Bus object
(From meta-phosphor rev: 86b8529e34cecaaa61dbdef4d101e4c2c7ea7515)
Change-Id: I4ecff9a81fb39ec472f952f0f1d79ff2ffc272f6
Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>
|
|
A number of corequisites exist so squashing these all into one patch.
meta-ingrasys - refresh master bc513127f4..67bcaf389f
meta-hxt - refresh master 86a4df514f..8fe0d38bbb
meta-phosphor - refresh master 06c09d7cce..df6ddae3d2
meta-quanta - refresh master 4f126361a1..53f3025271
Change-Id: I3daeef2a0467d8ea4f1fd1c617e526f8b11258af
Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>
|
|
Patrick Venture (1):
build: install into bin instead of sbin
(From meta-phosphor rev: 83ef054cd29bdfa12bbab4f58de2b7313409b1fe)
Change-Id: I72a19eeaaeb71569929c41451b864971a037fb42
Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>
|
|
Dhruvaraj Subhashchandran (1):
Add method to update certificate properities.
Marri Devender Rao (4):
Refactor code for uploading different types of certificates
Create cerificate object during startup for existing certificate
Implement Certificate and Install interface
Support creation/deletion of D-Bus certificate object
(From meta-phosphor rev: 44f319eaf27fd0d388e69d0072790dab76f1c366)
Change-Id: I79e3cb5ea0b3c04347fd6085fd4f44bc401ee06a
Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>
|
|
Since the config recipe packages will create symlinks to the certificate
manager template, RDEPEND rather than RRECOMMEND on the certificate
manager package (which provides the template).
Avoid obmc-phosphor-systemd. Enabling systemd units is the realm of
packaging scripts and the SYSTEMD_LINK feature in obmc-phosphor-systemd
implements this incorrectly. Just directly code install, pkg_postinst
and pkg_prerm here rather than trying to fix obmc-phosphor-systemd - the
extra indirection is more harmful to ease of comprehension for seasoned
Yocto developers than the couple of lines of code it saves.
(From meta-phosphor rev: 1a4e65e5847e299348b5f28ffa2b4b1837769deb)
Change-Id: Ideb12d62461b3b18ff5c92f3a76f1aa20c94a269
Tested: Built witherspoon image and verified rootfs unchanged.
Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>
|
|
nginx is not supported same will be replaced by bmcweb
Removed certificate manager service file and configuration file
(From meta-phosphor rev: df947512e69e2a5a949d4a6dc8eaa93ab961a439)
Change-Id: I3b856ced972f7494048317d1f28d321aef02f8c0
Signed-off-by: Marri Devender Rao <devenrao@in.ibm.com>
Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>
|
|
Patrick Venture (1):
build: pkg anti-pattern: use defaults
(From meta-phosphor rev: 1c6f584e01056f7ae70dd0d92bcfd7d91460230d)
Change-Id: I9d0cb3e4ecbcc205b6bbd908156b07f6bfcbde95
Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
Signed-off-by: Andrew Geissler <geissonator@yahoo.com>
|
|
Patrick Venture (7):
build: Add missing inclusion of phosphor-logging
build: add requirement for openssl to configure_ac
build: add check for experimental/filesystem
test: delete empty parameters
build: add gtest, gmock to configure_ac
gitignore: add missing items
test: use tabs in Makefile_am
(From meta-phosphor rev: 7222db38e730434d22df4e5cd32f8de5f212494e)
Change-Id: I13c037b80ecf36706499fae8e5eab31309f282c5
Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>
|
|
Added new service to install CA certificate
To start/stop service use commands
systemctl start phosphor-certificate-manager@authority.service
systemctl status phosphor-certificate-manager@authority.service
Tested:
2$ curl -c cjar -b cjar -k -H "Content-Type: application/octet-stream" -X
PUT -T cert.pem https://$BMC_IP//xyz/openbmc_project/certs/authority/ldap
{
"data": null,
"message": "200 OK",
"status": "ok"
}
root@witherspoon-w5:/tmp# systemctl stop phosphor-certificate-manager@authority.service
root@witherspoon-w5:/tmp#
root@witherspoon-w5:/tmp# systemctl start phosphor-certificate-manager@authority.service
root@witherspoon-w5:/tmp#
(From meta-phosphor rev: 139b373080872a96f7c64dfdc46807ed993daff0)
Change-Id: I993f1d7db13212f04022fd562ea058f389b26da9
Signed-off-by: Marri Devender Rao <devenrao@in.ibm.com>
Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>
|
|
Jayanth Othayoth (2):
Add support to upload CA certificate
Replace std::bind with lambda expressions
(From meta-phosphor rev: d59e4d1ec157a555fc3f9b1b5ece5c9219015173)
Change-Id: Iec6f65df12e1ecd129bbda069f248971b8c9ed14
Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>
|
|
Certificate manager restarts the service during upload process
based on the specific service file configuration.
nslcd service already subscribing upload/delete signal and
doing required configuration changes and service restart.
This patch is used to disable the service restart related
actions from certificate manager during activate/delete
process.
(From meta-phosphor rev: 36bfc20bc720fdeaecb7c3a7bb801f9a4d9cbfd7)
Change-Id: I841c276db1ff0f4487f03f5c2032bb0f5576e226
Signed-off-by: Jayanth Othayoth <ojayanth@in.ibm.com>
Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>
|
|
Jayanth Othayoth (1):
Certificate manager: Fix application crash for empty units
(From meta-phosphor rev: 8b32c268aaff7a093d20fd9b29d7a88dbb48528f)
Change-Id: Ia0c25e2d44bc93f304b7065bb6ee70d78d867824
Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>
|
|
Jayanth Othayoth (1):
Add MAINTAINERS file
(From meta-phosphor rev: 73ded97f4241060a7f1189cc1c284f23d1e7fee6)
Change-Id: Icbe7fb0e4be4b429dbd3ac2d775cf83a9cc431ec
Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>
|
|
Deepak Kodihalli (1):
Implement certificate delete
Jayanth Othayoth (5):
Add Certificate verification support
Add Public/Private key compare function
Enable client type certificate install interface
Allow certificate upload for "not yet valid" case
Ignore trust-chain related errors during certificate upload
Marri Devender Rao (3):
Add unit tests for certificate verification
Additional unit test for verification
Add unit test for certificate delete
(From meta-phosphor rev: 90bdaa9cb51039bc78c6c1ccb03e3061bf3a2e52)
Change-Id: I3ad78d37347f38bbab8e37c3e7a2979276e47d17
Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>
|
|
Marri Devender Rao (1):
Add unit test for certificate install
(From meta-phosphor rev: 59bdba58dcf34726a1a938d5bcd46475a795bf5b)
Change-Id: Id0c8485e87673f8520be29c636acd0170e7b59c3
Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>
|
|
(From meta-phosphor rev: cb27451978f0228de6b3806c43be39abbac043cb)
Change-Id: I914c482f659fbabf30af34d849b2821ce7932ee8
Signed-off-by: Marri Devender Rao <devenrao@in.ibm.com>
Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>
|
|
Jayanth Othayoth (1):
Implementation of certificate install interface
(From meta-phosphor rev: 015a5c90697703ace3e713a76c0dbdc0fd46c355)
Change-Id: I23fd26e326d874180b06735f9b824c4d3ac557ef
Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>
|
|
Add recipe and service files to start/stop nginx and nslcd services
To start/stop nginx service use
systemctl stop phosphor-certificate-manager@nginx.service
systemctl start phosphor-certificate-manager@nginx.service
To start/stop nslcd service use
systemctl stop phosphor-certificate-manager@nslcd.service
systemctl start phosphor-certificate-manager@nslcd.service
(From meta-phosphor rev: 08b55912f01f7a2b53ccc11fb8e508c9c8bc8a14)
Change-Id: Ie55613f8da061f9f948d645086db12be8239beea
Signed-off-by: Marri Devender Rao <devenrao@in.ibm.com>
Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>
|