Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Make elasticserach.test-with-ssl plugin more generic #57606

Open
jkakavas opened this issue Jun 3, 2020 · 3 comments
Open

Make elasticserach.test-with-ssl plugin more generic #57606

jkakavas opened this issue Jun 3, 2020 · 3 comments
Assignees
Labels
:Delivery/Build Build or test infrastructure >enhancement Team:Delivery Meta label for Delivery team

Comments

@jkakavas
Copy link
Member

jkakavas commented Jun 3, 2020

#57319 is awesome, but we could enhance it so that it can be used by many subprojects and in fips tests

  1. We should generate a CA that signs our certificates and then make all the key and certificate material available to the nodes in all formats:
  • Setup a CA key and certificate
  • Generate test-node private key and certificate signed by that CA
  • Generate test-client private key and certificate signed by that CA
  • Make all the above available as PEM files ( x.crt and x.key ) and in JKS / PKCS12 keystores
  • Copy all of them as extra config files
  1. We should cater for tests running in FIPS where we should use PEM files instead of JKS/PKCS12 keystores
*.ssl.key
*.ssl.secure_key_passphrase
*.ssl.certificate

instead of

*.ssl.keystore.path
*.ssl.keystore.secure_password

and

*.ssl.certificate_authorities

instead of

*.ssl.keystore.path

or

*.ssl.truststore.path
@jkakavas jkakavas added >enhancement :Delivery/Build Build or test infrastructure needs:triage Requires assignment of a team area label labels Jun 3, 2020
@elasticmachine
Copy link
Collaborator

Pinging @elastic/es-core-infra (:Core/Infra/Build)

@elasticmachine elasticmachine added the Team:Core/Infra Meta label for core/infra team label Jun 3, 2020
@breskeby breskeby self-assigned this Jun 3, 2020
@gwbrown gwbrown removed the needs:triage Requires assignment of a team area label label Jul 6, 2020
@mark-vieira mark-vieira added Team:Delivery Meta label for Delivery team and removed Team:Core/Infra Meta label for core/infra team labels Nov 11, 2020
@breskeby
Copy link
Contributor

breskeby commented May 3, 2022

@jkakavas after you added #66554 a while ago, what's missing from calling this issue resolved?

@jkakavas
Copy link
Member Author

jkakavas commented May 3, 2022

I think that #66554 takes care of 2. above. I'm not sure if 1. is still needed or if we still want to do this, I will defer to @elastic/es-security 🙏

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
:Delivery/Build Build or test infrastructure >enhancement Team:Delivery Meta label for Delivery team
Projects
None yet
Development

No branches or pull requests

5 participants