starlingx
/
utilities
Code Issues Proposed changes

Add Ipsec certificate to show-certs.sh 

check for /etc/swanctl/x509/system-ipsec-certificate-<hostname>.crt
exist and show in the output of show-certs.sh script.

Test Cases:
PASS: Enable ipsec on controller-0, verify that ipsec certificate
      shows in the output of show-certs.sh script.
PASS: Enable ipsec on controller-1, verify that ipsec certificate
      shows in the output of show-certs.sh script.
PASS: Enable ipsec on compute node, verify that ipsec certificate
      shows in the output of show-certs.sh script.
PASS: verify that ipsec certificate not shown in the output of
      show-certs.sh script if /etc/swanctl/x509/system-ipsec-
      certificate-<hostname>.crt doesn't exit

Story: 2010940
Task: 49891

Change-Id: I4341d6d5243fd2c635eb441cf32516a0d9b9987e
Signed-off-by: amantri <ayyappa.mantri@windriver.com>
This commit is contained in:
amantri 2024-04-18 12:34:14 -04:00
parent a79f2d06c8
commit 5f35a9d1ad
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
utilities/platform-util/scripts/show-certs.sh
View File

@ -394,6 +394,8 @@ for FILE in /opt/platform/config/${sw_version}/ssl_ca/*; do
PrintCertInfo-fromFile "$FILE" "$FILE" "${RED}Manual${RESET}"
done
PrintCertInfo-fromFile "IPsec" "/etc/swanctl/x509/system-ipsec-certificate-$(cat /etc/hostname).crt" "${GREEN}Automatic${RESET}"
# DC AdminEp Certificates
PrintCertInfo-fromFile "DC-AdminEp-RootCA" "/etc/pki/ca-trust/source/anchors/dc-adminep-root-ca.crt" "${GREEN}$AUTO_LABEL${RESET}"