[GitHub] rhtyd commented on issue #2239: CLOUDSTACK-9993: Securing Agents Communications

2017-08-28 Thread git
rhtyd commented on issue #2239: CLOUDSTACK-9993: Securing Agents Communications URL: https://github.com/apache/cloudstack/pull/2239#issuecomment-325306453 The XenServer env related failure was caused by centos7 based packging/dependencies issues where pyopessl.crypto may not have a

[GitHub] rhtyd commented on issue #2239: CLOUDSTACK-9993: Securing Agents Communications

2017-08-25 Thread git
rhtyd commented on issue #2239: CLOUDSTACK-9993: Securing Agents Communications URL: https://github.com/apache/cloudstack/pull/2239#issuecomment-324971414 @mlsorensen yes if @wido wants to use the new secure system he can (1) create a keystore at /etc/cloudstack/agent/cloud.jks with a

[GitHub] rhtyd commented on issue #2239: CLOUDSTACK-9993: Securing Agents Communications

2017-08-25 Thread git
rhtyd commented on issue #2239: CLOUDSTACK-9993: Securing Agents Communications URL: https://github.com/apache/cloudstack/pull/2239#issuecomment-324971414 @mlsorensen yes if @wido wants to use the new secure system he can (1) create a keystore at /etc/cloudstack/agent/cloud.jks with a

[GitHub] rhtyd commented on issue #2239: CLOUDSTACK-9993: Securing Agents Communications

2017-08-25 Thread git
rhtyd commented on issue #2239: CLOUDSTACK-9993: Securing Agents Communications URL: https://github.com/apache/cloudstack/pull/2239#issuecomment-324879755 @blueorangutan test centos7 xenserver-65sp1 This is an automated

[GitHub] rhtyd commented on issue #2239: CLOUDSTACK-9993: Securing Agents Communications

2017-08-25 Thread git
rhtyd commented on issue #2239: CLOUDSTACK-9993: Securing Agents Communications URL: https://github.com/apache/cloudstack/pull/2239#issuecomment-324874411 @blueorangutan package This is an automated message from the Apache

[GitHub] rhtyd commented on issue #2239: CLOUDSTACK-9993: Securing Agents Communications

2017-08-24 Thread git
rhtyd commented on issue #2239: CLOUDSTACK-9993: Securing Agents Communications URL: https://github.com/apache/cloudstack/pull/2239#issuecomment-324706796 Thanks @borisstoyanov , I'll keep this open for now until we receive the xenserver smoke test results. I'll merge this on satisfactory

[GitHub] rhtyd commented on issue #2239: CLOUDSTACK-9993: Securing Agents Communications

2017-08-24 Thread git
rhtyd commented on issue #2239: CLOUDSTACK-9993: Securing Agents Communications URL: https://github.com/apache/cloudstack/pull/2239#issuecomment-324619991 Thanks @DaanHoogland @nvazquez for reviewing This is an automated

[GitHub] rhtyd commented on issue #2239: CLOUDSTACK-9993: Securing Agents Communications

2017-08-24 Thread git
rhtyd commented on issue #2239: CLOUDSTACK-9993: Securing Agents Communications URL: https://github.com/apache/cloudstack/pull/2239#issuecomment-324544888 @blueorangutan test centos7 xenserver-65sp1 This is an automated

[GitHub] rhtyd commented on issue #2239: CLOUDSTACK-9993: Securing Agents Communications

2017-08-23 Thread git
rhtyd commented on issue #2239: CLOUDSTACK-9993: Securing Agents Communications URL: https://github.com/apache/cloudstack/pull/2239#issuecomment-324374398 @blueorangutan package This is an automated message from the Apache

[GitHub] rhtyd commented on issue #2239: CLOUDSTACK-9993: Securing Agents Communications

2017-08-22 Thread git
rhtyd commented on issue #2239: CLOUDSTACK-9993: Securing Agents Communications URL: https://github.com/apache/cloudstack/pull/2239#issuecomment-323980697 @blueorangutan package This is an automated message from the Apache

[GitHub] rhtyd commented on issue #2239: CLOUDSTACK-9993: Securing Agents Communications

2017-08-22 Thread git
rhtyd commented on issue #2239: CLOUDSTACK-9993: Securing Agents Communications URL: https://github.com/apache/cloudstack/pull/2239#issuecomment-323980697 @blueorangutan package This is an automated message from the Apache

[GitHub] rhtyd commented on issue #2239: CLOUDSTACK-9993: Securing Agents Communications

2017-08-21 Thread git
rhtyd commented on issue #2239: CLOUDSTACK-9993: Securing Agents Communications URL: https://github.com/apache/cloudstack/pull/2239#issuecomment-323721124 @wido okay, so for you environment just keep `ca.plugin.root.auth.strictness` set to `false` for both new and existing cloudstack

[GitHub] rhtyd commented on issue #2239: CLOUDSTACK-9993: Securing Agents Communications

2017-08-21 Thread git
rhtyd commented on issue #2239: CLOUDSTACK-9993: Securing Agents Communications URL: https://github.com/apache/cloudstack/pull/2239#issuecomment-323718422 @wido in current implementation -- all agent-mgmt server connections are encrypted and SSL enabled, based on a random cert that the

[GitHub] rhtyd commented on issue #2239: CLOUDSTACK-9993: Securing Agents Communications

2017-08-21 Thread git
rhtyd commented on issue #2239: CLOUDSTACK-9993: Securing Agents Communications URL: https://github.com/apache/cloudstack/pull/2239#issuecomment-323718422 @wido all agent-mgmt server connections are encrypted and SSL enabled, based on a random cert that the mgmt server creates, stores and

[GitHub] rhtyd commented on issue #2239: CLOUDSTACK-9993: Securing Agents Communications

2017-08-20 Thread git
rhtyd commented on issue #2239: CLOUDSTACK-9993: Securing Agents Communications URL: https://github.com/apache/cloudstack/pull/2239#issuecomment-323583831 The one test failing `create_volume` is not related to this PR but general intermittent failures, include those rvpc/rvr failures and

[GitHub] rhtyd commented on issue #2239: CLOUDSTACK-9993: Securing Agents Communications

2017-08-19 Thread git
rhtyd commented on issue #2239: CLOUDSTACK-9993: Securing Agents Communications URL: https://github.com/apache/cloudstack/pull/2239#issuecomment-323540764 @blueorangutan test centos6 vmware-55u3 This is an automated message

[GitHub] rhtyd commented on issue #2239: CLOUDSTACK-9993: Securing Agents Communications

2017-08-18 Thread git
rhtyd commented on issue #2239: CLOUDSTACK-9993: Securing Agents Communications URL: https://github.com/apache/cloudstack/pull/2239#issuecomment-323451002 @blueorangutan test This is an automated message from the Apache Git

[GitHub] rhtyd commented on issue #2239: CLOUDSTACK-9993: Securing Agents Communications

2017-08-18 Thread git
rhtyd commented on issue #2239: CLOUDSTACK-9993: Securing Agents Communications URL: https://github.com/apache/cloudstack/pull/2239#issuecomment-323445554 @blueorangutan package This is an automated message from the Apache

[GitHub] rhtyd commented on issue #2239: CLOUDSTACK-9993: Securing Agents Communications

2017-08-18 Thread git
rhtyd commented on issue #2239: CLOUDSTACK-9993: Securing Agents Communications URL: https://github.com/apache/cloudstack/pull/2239#issuecomment-323399304 @blueorangutan package This is an automated message from the Apache

[GitHub] rhtyd commented on issue #2239: CLOUDSTACK-9993: Securing Agents Communications

2017-08-18 Thread git
rhtyd commented on issue #2239: CLOUDSTACK-9993: Securing Agents Communications URL: https://github.com/apache/cloudstack/pull/2239#issuecomment-323362107 Pinging for review @nvazquez @borisstoyanov @DaanHoogland @wido @marcaurele @GabrielBrascher @rafaelweingartner @ustcweizhou @pyr and