pcp
[Top] [All Lists]

Re: [pcp] Client Certificates

To: Nathan Scott <nathans@xxxxxxxxxx>
Subject: Re: [pcp] Client Certificates
From: Martins Innus <minnus@xxxxxxxxxxx>
Date: Fri, 20 May 2016 12:47:07 -0400
Cc: "Andrew E. Bruno" <aebruno2@xxxxxxxxxxx>, PCP <pcp@xxxxxxxxxxx>
Delivered-to: pcp@xxxxxxxxxxx
In-reply-to: <2119013901.48975326.1463727863587.JavaMail.zimbra@xxxxxxxxxx>
References: <570C08BD.6000101@xxxxxxxxxxx> <571A66F2.5040800@xxxxxxxxxxx> <929167486.43184215.1461640684844.JavaMail.zimbra@xxxxxxxxxx> <1c3086f2-2068-56ee-d44a-d3a6d12dca88@xxxxxxxxxxx> <2052972802.46431761.1462860073621.JavaMail.zimbra@xxxxxxxxxx> <4f08a2c1-c2c7-bd6a-42eb-bc0c2fa8e7e0@xxxxxxxxxxx> <123165172.46601386.1462919587489.JavaMail.zimbra@xxxxxxxxxx> <8ace1293-4842-dd30-8e5a-0a8c6e91ef1a@xxxxxxxxxxx> <2119013901.48975326.1463727863587.JavaMail.zimbra@xxxxxxxxxx>
User-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:45.0) Gecko/20100101 Thunderbird/45.1.0
Nathan,

On 5/20/16 3:04 AM, Nathan Scott wrote:
Hi Martins,

----- Original Message -----
Nathan,
        OK, hopefully getting close here.


Definitely, its looking good.  I've put a martins-merge branch on github
which has your latest - I had to resolve a minor numbering conflict with
your new test.  I'm also now wondering if /etc/pcp/nssdb might be better
than /var/lib/pcp/config/nssdb - not sure.

OK, I can change it.  Just let me know.


I'm seeing a few new failures; I've attached the .bads (these all reliably
passed without the new code).  Anything stand out as immediately obvious?
All look like probably the same underlying problem - I can take a closer
look early next week if not obvious, they're reproducible here.

This is an issue with my QA changes.

Not sure why it was working before (I have the bash history that implies it did), but this patch is now needed and those QA tests pass for me. Without it, the "-Q" was being added in all cases.

diff --git a/qa/common.secure b/qa/common.secure
index e24b83d..29ee28e 100644
--- a/qa/common.secure
+++ b/qa/common.secure
@@ -139,7 +139,7 @@ nss_setup_collector()
        $sudo chown -R pcp:pcp $collectordb
     fi

-    if [ -n $force_client_cert ]
+    if [ -n "$force_client_cert" ]
     then
        cert_option="-Q"
     fi


Thanks

Martins

<Prev in Thread] Current Thread [Next in Thread>