[Pulp-list] Consumer certificate verification

Jason Dobies jason.dobies at redhat.com
Wed Aug 25 15:08:41 UTC 2010


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

We're taking a new approach with regard to verifying certificates
against the pulp CA.

We can't have apache do it in all cases because we need to be able to
support some commands that execute without a certificate (consumer
creation, all admin commands).

So I've moved that CA verification into the pulp app itself. I'm going
to finish up the admin cert stuff and then document the approach to all
of this so it's a bit more clear. I'll also put some notes in on how QE
can verify it's actually doing the CA verification.

- -- 
Jason Dobies
RHCE# 805008743336126
Freenode: jdob
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.14 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJMdTH5AAoJEOMmcTqOSQHCTAgH/RFwrVHQ4xyIh6D9Lh3c6JSs
57lGA/GryzBy4b+IkXBgW7YeNwEbtnaQtHurt9ovo3+yxhanwdGtq5e05uRryafA
Lay11FsGn350+Z4ow19hihbCSgtBww+A/mbLXYsdvKvNc+rT3bgiyoGnmJFXR5xY
EvBKdJxXqv9mCo41RFua8hPZVa1oV1kRw+2fOHoUWDssOncg+971Joi/GSiuk9tZ
ZVuyHNR3m8YS/mtrs3bbwMwjNdNB87E+/nBEZBkm+UKv5NFYd7GvZEbRHyN01eUf
qsagSTFTe5NLfb40KCe6SlfndUSgGPjU7OqyMrS1oYvj/OkKu1OStqGLqUM4QyI=
=Eufh
-----END PGP SIGNATURE-----




More information about the Pulp-list mailing list