62f4e41e9e
Problem: libgfapi does not enable SSL on mgmt connection. Fix: Enable SSL when it is enabled on mgmt connection is enabled, i.e. presence of /var/lib/glusterd/secure-access file Change-Id: I1ce4935b04e6140aeab819e42076defd580b0727 BUG: 1362602 Signed-off-by: Rajesh Joseph <rjoseph@redhat.com> Reviewed-on: http://review.gluster.org/15073 Smoke: Gluster Build System <jenkins@build.gluster.org> NetBSD-regression: NetBSD Build System <jenkins@build.gluster.org> CentOS-regression: Gluster Build System <jenkins@build.gluster.org> Reviewed-by: Niels de Vos <ndevos@redhat.com> Reviewed-by: Kaushal M <kaushal@redhat.com>
36 lines
757 B
Bash
36 lines
757 B
Bash
#!/bin/bash
|
|
|
|
for d in /etc/ssl /etc/openssl /usr/local/etc/openssl ; do
|
|
if test -d $d ; then
|
|
SSL_BASE=$d
|
|
break
|
|
fi
|
|
done
|
|
|
|
if [ ! -d "$SSL_BASE" ]; then
|
|
echo "Skip test! SSL certificate path missing in the system" >&2
|
|
SKIP_TESTS
|
|
exit 0
|
|
fi
|
|
|
|
SSL_KEY=$SSL_BASE/glusterfs.key
|
|
SSL_CERT=$SSL_BASE/glusterfs.pem
|
|
SSL_CA=$SSL_BASE/glusterfs.ca
|
|
|
|
|
|
# Create self-signed certificates
|
|
function create_self_signed_certs (){
|
|
openssl genrsa -out $SSL_KEY 1024
|
|
openssl req -new -x509 -key $SSL_KEY -subj /CN=Anyone -out $SSL_CERT
|
|
ln $SSL_CERT $SSL_CA
|
|
return $?
|
|
}
|
|
|
|
function cleanup_certs () {
|
|
rm -f $SSL_BASE/glusterfs.*
|
|
}
|
|
|
|
push_trapfunc cleanup_certs
|
|
|
|
cleanup_certs
|