Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-50696

nmstate support for require-id-on-certificate

XMLWordPrintable

    • nmstate-2.2.36-1.el9
    • rhel-sst-network-management
    • ssg_networking
    • 1
    • False
    • Hide

      None

      Show
      None
    • None
    • Red Hat OpenShift Container Platform
    • None
    • Hide

      Given a system administrator is configuring a VPN using nmstate with the require-id-on-certificate option,

      When they set this option to yes or no,

      Then, the system should correctly enforce SAN validation based on the setting, with:

      • no disabling SAN validation (accepting certificates without SAN)
      • yes enabling SAN validation

      Definition of Done:

      • The implementation meets the acceptance criteria
      • Integration tests are written and pass
      • The code is part of a downstream build attached to an errata
      Show
      Given a system administrator is configuring a VPN using nmstate with the require-id-on-certificate option, When they set this option to yes or no, Then, the system should correctly enforce SAN validation based on the setting, with: no disabling SAN validation (accepting certificates without SAN) yes enabling SAN validation Definition of Done: The implementation meets the acceptance criteria Integration tests are written and pass The code is part of a downstream build attached to an errata
    • None
    • None
    • None

      Goal

      • support setting `require-id-on-certificate` libreswan config via nmstate

      Acceptance Criteria

      A list of verification conditions, successful functional tests, or expected outcomes in order to declare this story/task successfully completed.

      • Verify that when set to `no` no SAN validation is performed (use a certificate with no SAN)
      • Verify that when set to `yes` SAN are validated (note: I believe there's a libreswan bug that blocks that)

              rh-ee-mshi1 Mingyu Shi
              ykashtan Yuval Kashtan
              Sabina Aledort
              Network Management Team Network Management Team
              Mingyu Shi Mingyu Shi
              Votes:
              0 Vote for this issue
              Watchers:
              9 Start watching this issue

                Created:
                Updated: