Skip to content
GitLab
Projects Groups Snippets
  • /
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in
  • W Waarp Gateway
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
  • Issues 48
    • Issues 48
    • List
    • Boards
    • Service Desk
    • Milestones
  • CI/CD
    • CI/CD
    • Pipelines
    • Jobs
    • Schedules
  • Deployments
    • Deployments
    • Releases
  • Packages and registries
    • Packages and registries
    • Package Registry
    • Container Registry
    • Infrastructure Registry
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
Collapse sidebar
  • Applications
  • Waarp Gateway
  • Waarp Gateway
  • Issues
  • #252
Closed
Open
Issue created Apr 09, 2021 by Paolo Pantellini@paolo.pantelliniMaintainer

Reorganize the storage and handling of certificates

  1. Before being inserted in the database, no matter the format in which it was given, a certificate should be parsed into tls.Certificate so that it can be validated. SSH public/private keys should be parsed into ssh.PublicKey/ssh.Signer.

  2. Since they are now parsed before insertion, certificates should now be stored in ASN.1 format (instead of whatever format the user gave). Not only would it be more consistent, but this would also remove the need to decode them after retrieving them from the database. If possible, the certification chain should be stored alongside the certificate.

  3. A new 'signature' column should be added to the 'certificates' table. When inserting a certificate in the database, a signature of the certificate should be computed and then stored in that new column. This will allow the gateway to retrieve a certificate from the database by using its signature.

Edited Apr 09, 2021 by Paolo Pantellini
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information
Assignee
Assign to
Time tracking