summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorRuss Allbery <rra@stanford.edu>2013-02-13 12:13:41 -0800
committerRuss Allbery <rra@stanford.edu>2013-02-13 12:42:11 -0800
commit3733b1537c987a42e4c3f6b30f4ccfef378e7cfc (patch)
treeb18612bc5190900810503d2f55a604bc95044050
parent4948053f7fd8a19f5c645d535ea3fa96f9539f4e (diff)
Add ssl-keypair to Stanford naming policy
Used currently by MDM to store both the certificate and the key in the same file for convenience. Change-Id: I38901ac93fe3022c2e00f735a0f995500841d709 Reviewed-on: https://gerrit.stanford.edu/784 Reviewed-by: Russ Allbery <rra@stanford.edu> Tested-by: Russ Allbery <rra@stanford.edu>
-rw-r--r--docs/stanford-naming10
-rw-r--r--perl/Wallet/Policy/Stanford.pm1
-rwxr-xr-xperl/t/stanford-naming.t4
3 files changed, 14 insertions, 1 deletions
diff --git a/docs/stanford-naming b/docs/stanford-naming
index aa59f68..5207c40 100644
--- a/docs/stanford-naming
+++ b/docs/stanford-naming
@@ -141,6 +141,16 @@ Object Naming
(OLD: <group>-<server>-ssl-key)
+ ssl-keypair/<server>[/<application>]
+
+ Same as ssl-key except that the signed certificate is included in
+ the same file as the private key. This is used for convenience
+ with some applications that want to have both the signed
+ certificate and private key in the same file.
+
+ The meaning of <server> and <application> are the same as for
+ ssl-key.
+
tivoli-key/<server>
The Tivoli password or backup encryption key for this server.
diff --git a/perl/Wallet/Policy/Stanford.pm b/perl/Wallet/Policy/Stanford.pm
index 39bea33..1444d51 100644
--- a/perl/Wallet/Policy/Stanford.pm
+++ b/perl/Wallet/Policy/Stanford.pm
@@ -69,6 +69,7 @@ our %FILE_TYPE = (
'ssh-dsa' => { host => 1 },
'ssh-rsa' => { host => 1 },
'ssl-key' => { host => 1, extra => 1 },
+ 'ssl-keypair' => { host => 1, extra => 1 },
'ssl-keystore' => { extra => 1 },
'ssl-pkcs12' => { extra => 1 },
'tivoli-key' => { host => 1 },
diff --git a/perl/t/stanford-naming.t b/perl/t/stanford-naming.t
index 9473ed5..3b9ea60 100755
--- a/perl/t/stanford-naming.t
+++ b/perl/t/stanford-naming.t
@@ -16,7 +16,7 @@ use 5.008;
use strict;
use warnings;
-use Test::More tests => 97;
+use Test::More tests => 99;
use lib 't/lib';
use Util;
@@ -46,6 +46,8 @@ my @VALID_FILES = qw(htpasswd/example.stanford.edu/web
ssh-rsa/example.stanford.edu
ssl-key/example.stanford.edu
ssl-key/example.stanford.edu/mysql
+ ssl-keypair/example.stanford.edu
+ ssl-keypair/example.stanford.edu/mysql
tivoli-key/example.stanford.edu
config/its-idg/example/foo
db/its-idg/example/s_foo