Argonaut server should support HTTPS

https://forge.fusiondirectory.org/projects/argonaut-agents/wiki/Protocol_security

(from redmine: issue id 3966, created on 2015-08-04, closed on 2015-08-25)

• Relations:
  • relates #3982
  • relates #943
  • copied_to #956 (closed)
  • copied_to #4012
• Changesets:
  • Revision 31e4212a by Côme Chilliet on 2015-08-04T15:18:12.000Z:

Fixes #3966 Added HTTPS support to supportDaemon and in argonaut schema

• Revision 61ebd793 by Côme Chilliet on 2015-08-04T15:18:26.000Z:

Fixes #3966 Added HTTPS support to supportDaemon and in argonaut schema

• Revision 4848068e by Côme Chilliet on 2015-08-05T07:04:12.000Z:

Fixes #3966 Added HTTPS support to supportDaemon and in argonaut schema

• Revision 9fdeba19 by Côme Chilliet on 2015-08-05T07:04:28.000Z:

Fixes #3966 Added HTTPS support to supportDaemon and in argonaut schema

• Revision 99ab7c12 by Côme Chilliet on 2015-08-13T15:21:18.000Z:

Fixes #3966 Adding HTTPS options to argonaut client

• Revision d0d48470 by Côme Chilliet on 2015-08-13T15:21:37.000Z:

Fixes #3966 Adding HTTPS options to argonaut client

• Revision a28c6fc0 by Benoit MORTIER on 2015-08-13T19:20:53.000Z:

Fixes: #3966 Argonaut server should support HTTPS

Signed-off-by: Benoit Mortier <benoit.mortier@opensides.be>

• Revision 43cbdfc0 by Benoit MORTIER on 2015-08-13T19:21:32.000Z:

Fixes: #3966 Argonaut server should support HTTPS

Signed-off-by: Benoit Mortier <benoit.mortier@opensides.be>

• Revision 1666491c by Côme Chilliet on 2015-08-17T09:18:32.000Z:

Fixes #3966 Path of CA used for argonaut-server is now stored in FD config

• Revision 4c55e36a by Côme Chilliet on 2015-08-17T09:18:46.000Z:

Fixes #3966 Path of CA used for argonaut-server is now stored in FD config

• Revision 47d3e814 by Côme Chilliet on 2015-08-17T09:28:45.000Z:

Fixes #3966 Added CA cert path to argonaut client

• Revision 60a89a2b by Côme Chilliet on 2015-08-17T09:29:32.000Z:

Fixes #3966 Added CA cert path to argonaut client

• Revision e8f31d3c by Côme Chilliet on 2015-08-18T10:34:29.000Z:

Fixes #3966 Removing long descriptions from attributes names

• Revision 97dff069 by Côme Chilliet on 2015-08-18T10:34:44.000Z:

Fixes #3966 Removing long descriptions from attributes names

• Custom Fields:
  • Bug in version: 1.0.8.9
• Uploads:
  • 0001-Fixes-3966-Added-HTTPS-support-to-supportDaemon-and-.patch
  • 0002-Fixes-3966-Added-HTTPS-support-to-supportDaemon-and-.patch
  • 0003-Fixes-3966-Added-mandatory-attribute-to-argonautClie.patch
  • 0004-Fixed-3966-Added-CN-option-to-argonaut-SSL-options.patch
  • 0005-Fixes-3966-Adding-HTTPS-options-to-argonaut-client.patch
  • 
  • 0006-Fixes-3966-Path-of-CA-used-for-argonaut-server-is-no.patch
  • 0007-Fixes-3966-Added-CA-cert-path-to-argonaut-client.patch
  • 0008-Fixes-3966-Removing-long-descriptions-from-attribute.patch

Reopen issue

(from redmine: written on 2015-08-04)

hello,

applied to 1.0.9 and develop

Cheers

(from redmine: written on 2015-08-04)

hello,

applied to 1.0.9 and develop

Cheers

(from redmine: written on 2015-08-05)

hello,

applied to 1.0.9 and develop

Cheers

(from redmine: written on 2015-08-07)

Argonaut-server needs POE::Component::SSLify (package libpoe-component-sslify-perl for debian) in order to be able to do HTTPS.

(from redmine: written on 2015-08-10)

hello,

applied to 1.0.9 and develop

Cheers

(from redmine: written on 2015-08-13)

hello,

argonautFDCaCertPath should be suppressed as we already have argonautCaCertPath and the path is the same on all os

the code for class_supportDaemon.inc should be adapted

'cafile' => $ldap_infos['argonautFDCaCertPath'][0],

Cheers

(from redmine: written on 2015-08-13)

hello,

applied to 1.0.9 and develop

Cheers

(from redmine: written on 2015-08-13)

hello,

as said on irc on the argonaut server service should only have

Key on argonaut server Certificate on argonaut server CA certificate on argonaut server -CA certificate on FusionDirectory server- CN of the certificate

and should be organized like this :

CA certificate on argonaut server == argonautCaCertPath Certificate on argonaut server == argonautCertPath Key on argonaut server == argonautKeyPath CN of the certificate == argonautCertCN

The argonaut client should have :

CA certificate on argonaut server == argonautCaCertPath Certificate on argonaut server == argonautCertPath Key on argonaut server == argonautKeyPath CN of the certificate == argonautCertCN

(from redmine: written on 2015-08-13)

hello,

the protocol should be https by default, because we prefer people to encrypt there communications, better would be to desactivate http completely.

(from redmine: written on 2015-08-13)

hello,

here is the schema updated for this to work

(from redmine: written on 2015-08-17)

hello,

applied to 1.0.9 and develop

Cheers

(from redmine: written on 2015-08-17)

hello,

applied to 1.0.9 and develop

Cheers

(from redmine: written on 2015-08-17)

hello,

applied to 1.0.9 and develop

Cheers

(from redmine: written on 2015-08-18)

Close issue

(from redmine: written on 2015-08-25)

closed

added Added label