Adds SSL/TLS support 85/66285/16
authorTim Rozet <trozet@redhat.com>
Wed, 6 Dec 2017 16:52:21 +0000 (11:52 -0500)
committerDaniel Farrell <dfarrell@redhat.com>
Tue, 2 Jan 2018 19:01:13 +0000 (14:01 -0500)
commit66d6e95acc274acc2eaf860360a174d4c0ec17d9
tree6f5d9ddaa5dcba7e38e495cb3ac07e80d7fed375
parent98e7cee2fe3145078dbc523ff7e39fd2a8678b63
Adds SSL/TLS support

Allows configuration for requiring TLS communication across Northbound
REST and OVSDB/OF with OVS.  The TLS configuration enables two
keystores, "controller" and "truststore".  The controller keystore is
used to hold the private key and certificate, which may be
auto-generated or provided as input parameters.  The truststore holds
trusted certificates for clients connecting to ODL and may also be
provided via a parameter.  Additionally when providing the private key
and certificate to the controller keystore, a public certificate
authority certificate may be linked.

Change-Id: I079fc0759bb42888472ef95ca239c3ca67db8a56
Signed-off-by: Tim Rozet <trozet@redhat.com>
Signed-off-by: Daniel Farrell <dfarrell@redhat.com>
19 files changed:
CHANGELOG
README.markdown
files/org.opendaylight.ovsdb.library.cfg [new file with mode: 0644]
lib/puppet/functions/convert_cert_to_string.rb [new file with mode: 0644]
lib/puppet/provider/odl_keystore/jks.rb [new file with mode: 0644]
lib/puppet/type/odl_keystore.rb [new file with mode: 0644]
manifests/config.pp
manifests/init.pp
manifests/params.pp
manifests/post_config.pp [new file with mode: 0644]
metadata.json
spec/acceptance/class_spec.rb
spec/classes/opendaylight_spec.rb
spec/spec_helper.rb
spec/spec_helper_acceptance.rb
spec/unit/provider/jks_spec.rb [new file with mode: 0644]
spec/unit/type/odl_keystore_spec.rb [new file with mode: 0644]
templates/aaa-cert-config.xml.erb [new file with mode: 0644]
templates/default-openflow-connection-config.xml.erb [new file with mode: 0644]