]> review.fuel-infra Code Review - openstack-build/neutron-build.git/commit
BigSwitch: Add SSL Certificate Validation
authorKevin Benton <blak111@gmail.com>
Mon, 3 Feb 2014 04:46:18 +0000 (20:46 -0800)
committerMark McClain <mmcclain@yahoo-inc.com>
Wed, 5 Mar 2014 20:08:39 +0000 (15:08 -0500)
commit7255e056092f034daaeb4246a812900645d46911
tree9c60c8029952d60f79f1c79486808736f769f6e0
parenteb7de12defaa30624141f27631228f49ab8befc9
BigSwitch: Add SSL Certificate Validation

This patch adds the option to use SSL certificate
validation on the backend controller using SSH-style
sticky authentication, individual trusted
certificates, and/or certificate authorities.
Also adds caching of connections to deal with
increased overhead of TLS/SSL handshake.

Default is now sticky-style enforcement.

Partial-Bug: 1188189
Implements: blueprint bsn-certificate-enforcement
Change-Id: If0bab196495c4944a53e0e394c956cca36269883
12 files changed:
etc/neutron/plugins/bigswitch/restproxy.ini
etc/neutron/plugins/bigswitch/ssl/ca_certs/README [new file with mode: 0644]
etc/neutron/plugins/bigswitch/ssl/host_certs/README [new file with mode: 0644]
neutron/plugins/bigswitch/config.py
neutron/plugins/bigswitch/servermanager.py
neutron/tests/unit/bigswitch/etc/ssl/ca_certs/README [new file with mode: 0644]
neutron/tests/unit/bigswitch/etc/ssl/combined/README [new file with mode: 0644]
neutron/tests/unit/bigswitch/etc/ssl/host_certs/README [new file with mode: 0644]
neutron/tests/unit/bigswitch/fake_server.py
neutron/tests/unit/bigswitch/test_base.py
neutron/tests/unit/bigswitch/test_ssl.py [new file with mode: 0644]
setup.cfg