Alon Bar-Lev has posted comments on this change.

Change subject: WebSocketProxy on a separate host
......................................................................


Patch Set 29:

(1 comment)

http://gerrit.ovirt.org/#/c/26898/29/packaging/setup/plugins/ovirt-engine-setup/websocket_proxy/config.py
File packaging/setup/plugins/ovirt-engine-setup/websocket_proxy/config.py:

Line 139:                     default=22,
Line 140:                 )
Line 141:             transport = None
Line 142:             try:
Line 143:                 transport = paramiko.Transport(
> I agree with you that an enrollment process like SCEP it's a better way to 
once again, I do not care if you ask of user runs engine-config, it is same 
thing, as when you ask probably the other side is not setup yet... so I am not 
sure there is any benefit of asking during setup.

the enrollment procedure should be exactly as I stated, no shortcuts, please.

two methods:

1. generate certificate requests, present, accept certificate.

2. accept PKCS#12 locally available file, if user manually enrolled it in any 
other way.

in future, when and if we have proper CA implementation with public interface 
we will send the request to that interface, waiting for approval of admin and 
fetch certificate.
Line 144:                     (
Line 145:                         self.environment[
Line 146:                             osetupcons.ConfigEnv.REMOTE_ENGINE_HOST
Line 147:                         ],


-- 
To view, visit http://gerrit.ovirt.org/26898
To unsubscribe, visit http://gerrit.ovirt.org/settings

Gerrit-MessageType: comment
Gerrit-Change-Id: I169604429e5a2d72573b05c0e5481306edfdd935
Gerrit-PatchSet: 29
Gerrit-Project: ovirt-engine
Gerrit-Branch: master
Gerrit-Owner: Simone Tiraboschi <[email protected]>
Gerrit-Reviewer: Alon Bar-Lev <[email protected]>
Gerrit-Reviewer: Lev Veyde <[email protected]>
Gerrit-Reviewer: Sandro Bonazzola <[email protected]>
Gerrit-Reviewer: Simone Tiraboschi <[email protected]>
Gerrit-Reviewer: Yedidyah Bar David <[email protected]>
Gerrit-Reviewer: [email protected]
Gerrit-Reviewer: oVirt Jenkins CI Server
Gerrit-HasComments: Yes
_______________________________________________
Engine-patches mailing list
[email protected]
http://lists.ovirt.org/mailman/listinfo/engine-patches

Reply via email to