Searched hist:f46827128c0b53aac50e08db772ffe48c9987c65 (Results 1 – 4 of 4) sorted by relevance
| /openbmc/phosphor-certificate-manager/ |
| H A D | mainapp.cpp | diff f46827128c0b53aac50e08db772ffe48c9987c65 Tue Mar 19 05:00:28 CDT 2019 Marri Devender Rao <devenrao@in.ibm.com> Add Generate Key and Certificate Signing Request (CSR)
Generates Private key and CSR file, at present supporing
only RSA algorithm type.
-The generateCSR method defined in Create interface is implemented
by manager class to Create CSR and PrivateKey files.
-The cSR method defined in View interface is implemented by CSR
class to view CSR file.
- Generate CSR is time consuming operation and it might time-out
the D-Bus call. Forking process and performing CSR generation in
the child process, adding the process ID of the child process to the
SD Event loop so that callback is received when the chid process
is done with the CSR generation.
- As the GenerateCSR method returns immediately, caller need
to wait on InterfacesAdded signal that is generated after completion
of the CSR request. The caller then invokes cSR method of
CSR interface to read the CSR.
- For any failure in Generate CSR CSR object is created with error
status.
- CSR object raises exception if error is set else CSR data is
returned to the caller.
- To cater for failure cases caller need to start a timer, which
will be terminated after getting InterfaceAdded signal or upon timeout.
-Added Unit tests.
Tested:
1) Added unit tests to verify CSR generation
2) Tested with Redfish to generate and view CSR
curl -c cjar -b cjar -k -H "X-Auth-Token: $bmc_token" -X POST
https://${bmc}/redfish/v1/CertificateService/Actions/CertificateService.GenerateCSR/
-d @generate.jon
{
"CSRString": "-----BEGIN CERTIFICATE REQUEST---7E=\n-----END CERTIFICATE
REQUEST-----\n",
"CertificateCollection": {
"@odata.id": "/redfish/v1/AccountService/LDAP/Certificates/"
}
}
Change-Id: I1e3ae8df45f87bfd8903f552d93c4df1af7c569f
Signed-off-by: Marri Devender Rao <devenrao@in.ibm.com>
Signed-off-by: Nagaraju Goruganti <ngorugan@in.ibm.com>
|
| H A D | certs_manager.hpp | diff f46827128c0b53aac50e08db772ffe48c9987c65 Tue Mar 19 05:00:28 CDT 2019 Marri Devender Rao <devenrao@in.ibm.com> Add Generate Key and Certificate Signing Request (CSR)
Generates Private key and CSR file, at present supporing
only RSA algorithm type.
-The generateCSR method defined in Create interface is implemented
by manager class to Create CSR and PrivateKey files.
-The cSR method defined in View interface is implemented by CSR
class to view CSR file.
- Generate CSR is time consuming operation and it might time-out
the D-Bus call. Forking process and performing CSR generation in
the child process, adding the process ID of the child process to the
SD Event loop so that callback is received when the chid process
is done with the CSR generation.
- As the GenerateCSR method returns immediately, caller need
to wait on InterfacesAdded signal that is generated after completion
of the CSR request. The caller then invokes cSR method of
CSR interface to read the CSR.
- For any failure in Generate CSR CSR object is created with error
status.
- CSR object raises exception if error is set else CSR data is
returned to the caller.
- To cater for failure cases caller need to start a timer, which
will be terminated after getting InterfaceAdded signal or upon timeout.
-Added Unit tests.
Tested:
1) Added unit tests to verify CSR generation
2) Tested with Redfish to generate and view CSR
curl -c cjar -b cjar -k -H "X-Auth-Token: $bmc_token" -X POST
https://${bmc}/redfish/v1/CertificateService/Actions/CertificateService.GenerateCSR/
-d @generate.jon
{
"CSRString": "-----BEGIN CERTIFICATE REQUEST---7E=\n-----END CERTIFICATE
REQUEST-----\n",
"CertificateCollection": {
"@odata.id": "/redfish/v1/AccountService/LDAP/Certificates/"
}
}
Change-Id: I1e3ae8df45f87bfd8903f552d93c4df1af7c569f
Signed-off-by: Marri Devender Rao <devenrao@in.ibm.com>
Signed-off-by: Nagaraju Goruganti <ngorugan@in.ibm.com>
|
| H A D | certs_manager.cpp | diff f46827128c0b53aac50e08db772ffe48c9987c65 Tue Mar 19 05:00:28 CDT 2019 Marri Devender Rao <devenrao@in.ibm.com> Add Generate Key and Certificate Signing Request (CSR)
Generates Private key and CSR file, at present supporing
only RSA algorithm type.
-The generateCSR method defined in Create interface is implemented
by manager class to Create CSR and PrivateKey files.
-The cSR method defined in View interface is implemented by CSR
class to view CSR file.
- Generate CSR is time consuming operation and it might time-out
the D-Bus call. Forking process and performing CSR generation in
the child process, adding the process ID of the child process to the
SD Event loop so that callback is received when the chid process
is done with the CSR generation.
- As the GenerateCSR method returns immediately, caller need
to wait on InterfacesAdded signal that is generated after completion
of the CSR request. The caller then invokes cSR method of
CSR interface to read the CSR.
- For any failure in Generate CSR CSR object is created with error
status.
- CSR object raises exception if error is set else CSR data is
returned to the caller.
- To cater for failure cases caller need to start a timer, which
will be terminated after getting InterfaceAdded signal or upon timeout.
-Added Unit tests.
Tested:
1) Added unit tests to verify CSR generation
2) Tested with Redfish to generate and view CSR
curl -c cjar -b cjar -k -H "X-Auth-Token: $bmc_token" -X POST
https://${bmc}/redfish/v1/CertificateService/Actions/CertificateService.GenerateCSR/
-d @generate.jon
{
"CSRString": "-----BEGIN CERTIFICATE REQUEST---7E=\n-----END CERTIFICATE
REQUEST-----\n",
"CertificateCollection": {
"@odata.id": "/redfish/v1/AccountService/LDAP/Certificates/"
}
}
Change-Id: I1e3ae8df45f87bfd8903f552d93c4df1af7c569f
Signed-off-by: Marri Devender Rao <devenrao@in.ibm.com>
Signed-off-by: Nagaraju Goruganti <ngorugan@in.ibm.com>
|
| /openbmc/phosphor-certificate-manager/test/ |
| H A D | certs_manager_test.cpp | diff f46827128c0b53aac50e08db772ffe48c9987c65 Tue Mar 19 05:00:28 CDT 2019 Marri Devender Rao <devenrao@in.ibm.com> Add Generate Key and Certificate Signing Request (CSR)
Generates Private key and CSR file, at present supporing
only RSA algorithm type.
-The generateCSR method defined in Create interface is implemented
by manager class to Create CSR and PrivateKey files.
-The cSR method defined in View interface is implemented by CSR
class to view CSR file.
- Generate CSR is time consuming operation and it might time-out
the D-Bus call. Forking process and performing CSR generation in
the child process, adding the process ID of the child process to the
SD Event loop so that callback is received when the chid process
is done with the CSR generation.
- As the GenerateCSR method returns immediately, caller need
to wait on InterfacesAdded signal that is generated after completion
of the CSR request. The caller then invokes cSR method of
CSR interface to read the CSR.
- For any failure in Generate CSR CSR object is created with error
status.
- CSR object raises exception if error is set else CSR data is
returned to the caller.
- To cater for failure cases caller need to start a timer, which
will be terminated after getting InterfaceAdded signal or upon timeout.
-Added Unit tests.
Tested:
1) Added unit tests to verify CSR generation
2) Tested with Redfish to generate and view CSR
curl -c cjar -b cjar -k -H "X-Auth-Token: $bmc_token" -X POST
https://${bmc}/redfish/v1/CertificateService/Actions/CertificateService.GenerateCSR/
-d @generate.jon
{
"CSRString": "-----BEGIN CERTIFICATE REQUEST---7E=\n-----END CERTIFICATE
REQUEST-----\n",
"CertificateCollection": {
"@odata.id": "/redfish/v1/AccountService/LDAP/Certificates/"
}
}
Change-Id: I1e3ae8df45f87bfd8903f552d93c4df1af7c569f
Signed-off-by: Marri Devender Rao <devenrao@in.ibm.com>
Signed-off-by: Nagaraju Goruganti <ngorugan@in.ibm.com>
|