https://pfspipe.ipmu.jp/jira This file is an XML representation of an issue en-us 8.3.4 803005 13-09-2019 https://pfspipe.ipmu.jp/jira/browse/INSTRM-210 Instrument control development <p>Build production (at summit) private CA for virt.<br/> also add scripts to make certs for vm hosts to repository.</p> <p>current setup procedure is:</p> <div class="code panel" style="border-width: 1px;"><div class="codeContent panelContent"> <pre class="code-java"> openssl req -<span class="code-keyword">new</span> -newkey rsa:2048 -nodes -days 1825 -sha256 -out newcerts/(IPaddr).csr -keyout <span class="code-keyword">private</span>/(IPaddr).key -subj <span class="code-quote">"/C=JP/ST=Chiba/L=Kashiwa/O=PFS/CN=(IPaddr)"</span> openssl ca -config virt-pki.cnf -days 1825 -policy policy_anything -out certs/(IPaddr).pem -infiles newcerts/(IPaddr).csr </pre> </div></div> INSTRM-210

Add role to build production private CA for virt

Task Normal Done Done shimono shimono Tue, 26 Sep 2017 04:50:56 +0000 Mon, 23 Oct 2017 14:39:11 +0000 Mon, 23 Oct 2017 14:39:11 +0000 ics_ansible 0 1 <p>Instead of just adding scripts, add a role to ansible for configuration and scripts to build items.</p> <ul> <li>add a role to install packages, configure, but not build CA</li> <li>add scripts to build CA and certs via ansible (j2)</li> </ul> <p>pushed and PR made. r? from the wind.</p> <p>working fine. merged.</p> Relates INSTRM-235 Development Rank 0|ii033b: Sprint 2017-10A