Update certificates for OpenFlow TLS connection 97/97997/1
authorSangwook Ha <sangwook.ha@verizon.com>
Wed, 20 Oct 2021 05:48:10 +0000 (22:48 -0700)
committerSangwook Ha <sangwook.ha@verizon.com>
Wed, 20 Oct 2021 05:48:10 +0000 (22:48 -0700)
commit8e9254858354ce7632f9d7f104aea82c6cc0630b
tree282ffc41f4fd940608e36fb17ab63fd2e97162e4
parent0f5cfedbcdcac2227fec58f379d9b518c2c0f793
Update certificates for OpenFlow TLS connection

Certificate chains with intermediate CAs, currently used for
the OpenFlow channel TLS connection for testing, is not supported
by Open vSwitch.

Replace certificates/keystores for the switch & controller with
the ones signed directly by the root CA and create a new script,
gen-certs.sh, to make it easier to generate new certificates.

Also, fix an error in MininetKeywords in executing 'ovs-vsctl get-ssl'
command.

Signed-off-by: Sangwook Ha <sangwook.ha@verizon.com>
Change-Id: Ieb0c3c4f8285336a4ed4b48412c5d0e2fc7b27cb
csit/libraries/MininetKeywords.robot
csit/libraries/tls/cachain.crt
csit/libraries/tls/gen-certs.sh [new file with mode: 0755]
csit/libraries/tls/keystore.p12
csit/libraries/tls/switch.crt
csit/libraries/tls/switch.key
csit/libraries/tls/truststore.p12