6e1a21881e
Client certificate authentication is disabled by default.
To enable client auth, define the following in nsx.ini:
nsx_use_client_auth = True
nsx_client_cert_storage = nsx-db
nsx_client_cert_file = <file to store certificate and private key>
To enable client auth in devstack, define the following in local.conf:
NSX_USE_CLIENT_CERT_AUTH=True
This commit covers only DB type of cert storage. Barbican storage
and imported cert will be added later. Also planned for near future:
reload cert from DB if NSX connection failes due to bad cert
show warning when cert nears expiration
delete cert file from file system on neutron exit
Change-Id: Ic70a949b740d9149d71187b02640d3071a3e0159
47 lines
1.5 KiB
Python
47 lines
1.5 KiB
Python
# Copyright 2015 VMware, Inc. All rights reserved.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
|
|
# Default conf file locations
|
|
NEUTRON_CONF = '/etc/neutron/neutron.conf'
|
|
NSX_INI = '/etc/neutron/plugins/vmware/nsx.ini'
|
|
|
|
# NSX Plugin Constants
|
|
NSXV3_PLUGIN = 'vmware_nsx.plugin.NsxV3Plugin'
|
|
NSXV_PLUGIN = 'vmware_nsx.plugin.NsxVPlugin'
|
|
|
|
# Common Resource Constants
|
|
NETWORKS = 'networks'
|
|
ROUTERS = 'routers'
|
|
DHCP_BINDING = 'dhcp-binding'
|
|
|
|
# NSXV3 Resource Constants
|
|
FIREWALL_SECTIONS = 'firewall-sections'
|
|
FIREWALL_NSX_GROUPS = 'nsx-security-groups'
|
|
SECURITY_GROUPS = 'security-groups'
|
|
PORTS = 'ports'
|
|
METADATA_PROXY = 'metadata-proxy'
|
|
ORPHANED_DHCP_SERVERS = 'orphaned-dhcp-servers'
|
|
CERTIFICATE = 'certificate'
|
|
|
|
# NSXV Resource Constants
|
|
EDGES = 'edges'
|
|
SPOOFGUARD_POLICY = 'spoofguard-policy'
|
|
BACKUP_EDGES = 'backup-edges'
|
|
ORPHANED_EDGES = 'orphaned-edges'
|
|
MISSING_EDGES = 'missing-edges'
|
|
METADATA = 'metadata'
|
|
MISSING_NETWORKS = 'missing-networks'
|
|
ORPHANED_NETWORKS = 'orphaned-networks'
|
|
LBAAS = 'lbaas'
|