Alon Bar-Lev has posted comments on this change.

Change subject: core: Add servlets for CA and SSH keys
......................................................................


Patch Set 1:

Juan/Doron,

Why don't we store the keys and certificate in standard PKCS#12 file format?

It will enable to use it within any environment.

Public keys of CA and engine can be stored as plain x509 certificate files.

I have not investigated yet the CA implementation but I would expect it to be:

 ./keys
 ./keys/ca.crt
 ./keys/engine.crt
 ./keys/engine.p12
 ./keys/node1.p12
 ./keys/node2.p12
 ./keys/node3.p12

 * the engine is store as x509 certificate so no password will be required when 
retrieving public key.

Then we can use whatever program to read them... and java supports KeyStore 
PKCS12 type.

--
To view, visit http://gerrit.ovirt.org/4853
To unsubscribe, visit http://gerrit.ovirt.org/settings

Gerrit-MessageType: comment
Gerrit-Change-Id: I328baded92b2e7c5169bc87e7c19680f598389b9
Gerrit-PatchSet: 1
Gerrit-Project: ovirt-engine
Gerrit-Branch: master
Gerrit-Owner: Juan Hernandez <juan.hernan...@redhat.com>
Gerrit-Reviewer: Alon Bar-Lev <alo...@redhat.com>
Gerrit-Reviewer: Doron Fediuck <dfedi...@redhat.com>
Gerrit-Reviewer: Juan Hernandez <juan.hernan...@redhat.com>
Gerrit-Reviewer: Laszlo Hornyak <lhorn...@redhat.com>
Gerrit-Reviewer: Ofer Schreiber <oschr...@redhat.com>
_______________________________________________
Engine-patches mailing list
Engine-patches@ovirt.org
http://lists.ovirt.org/mailman/listinfo/engine-patches

Reply via email to