Statistics
| Branch: | Tag: | Revision:

root / test / py @ 45f75526

Name Size
  cmdlib
__init__.py 796 Bytes
bash_completion.bash 5.2 kB
cfgupgrade_unittest.py 16.8 kB
check-cert-expired_unittest.bash 1.9 kB
cli-test.bash 196 Bytes
daemon-util_unittest.bash 2.9 kB
docs_unittest.py 10.2 kB
ganeti-cleaner_unittest.bash 5.9 kB
ganeti-cli.test 504 Bytes
ganeti.asyncnotifier_unittest.py 6.7 kB
ganeti.backend_unittest-runasroot.py 2 kB
ganeti.backend_unittest.py 32.3 kB
ganeti.bootstrap_unittest.py 6.5 kB
ganeti.cli_unittest.py 58.3 kB
ganeti.client.gnt_cluster_unittest.py 12.1 kB
ganeti.client.gnt_instance_unittest.py 8.2 kB
ganeti.client.gnt_job_unittest.py 5 kB
ganeti.compat_unittest.py 3.9 kB
ganeti.confd.client_unittest.py 7.1 kB
ganeti.config_unittest.py 23 kB
ganeti.constants_unittest.py 6.4 kB
ganeti.daemon_unittest.py 24.3 kB
ganeti.errors_unittest.py 2.9 kB
ganeti.hooks_unittest.py 18.5 kB
ganeti.ht_unittest.py 9.2 kB
ganeti.http_unittest.py 26.2 kB
ganeti.hypervisor.hv_chroot_unittest.py 1.8 kB
ganeti.hypervisor.hv_fake_unittest.py 1.5 kB
ganeti.hypervisor.hv_kvm_unittest.py 14.4 kB
ganeti.hypervisor.hv_lxc_unittest.py 1.6 kB
ganeti.hypervisor.hv_xen_unittest.py 31.7 kB
ganeti.hypervisor_unittest.py 2.6 kB
ganeti.impexpd_unittest.py 8.5 kB
ganeti.jqueue_unittest.py 95.3 kB
ganeti.jstore_unittest.py 3.2 kB
ganeti.locking_unittest.py 92 kB
ganeti.luxi_unittest.py 1 kB
ganeti.masterd.iallocator_unittest.py 8 kB
ganeti.masterd.instance_unittest.py 5.7 kB
ganeti.mcpu_unittest.py 8.9 kB
ganeti.netutils_unittest.py 19.1 kB
ganeti.objects_unittest.py 27.2 kB
ganeti.opcodes_unittest.py 13.9 kB
ganeti.outils_unittest.py 3 kB
ganeti.ovf_unittest.py 30.1 kB
ganeti.qlang_unittest.py 10.2 kB
ganeti.query_unittest.py 75.5 kB
ganeti.rapi.baserlib_unittest.py 5.4 kB
ganeti.rapi.client_unittest.py 57.7 kB
ganeti.rapi.resources_unittest.py 2 kB
ganeti.rapi.rlib2_unittest.py 58.4 kB
ganeti.rapi.testutils_unittest.py 5.4 kB
ganeti.rpc.client_unittest.py 9.1 kB
ganeti.rpc_unittest.py 33.6 kB
ganeti.runtime_unittest.py 5.8 kB
ganeti.serializer_unittest.py 4.3 kB
ganeti.server.rapi_unittest.py 9.1 kB
ganeti.ssconf_unittest.py 8.6 kB
ganeti.ssh_unittest.py 5.1 kB
ganeti.storage.bdev_unittest.py 11.4 kB
ganeti.storage.container_unittest.py 4.5 kB
ganeti.storage.drbd_unittest.py 17.2 kB
ganeti.storage.filestorage_unittest.py 10.3 kB
ganeti.storage.gluster_unittest.py 4.5 kB
ganeti.tools.burnin_unittest.py 1.2 kB
ganeti.tools.ensure_dirs_unittest.py 2.6 kB
ganeti.tools.node_daemon_setup_unittest.py 6.7 kB
ganeti.tools.prepare_node_join_unittest.py 8.7 kB
ganeti.uidpool_unittest.py 3.8 kB
ganeti.utils.algo_unittest.py 12 kB
ganeti.utils.filelock_unittest.py 4.3 kB
ganeti.utils.hash_unittest.py 4.4 kB
ganeti.utils.io_unittest-runasroot.py 4.6 kB
ganeti.utils.io_unittest.py 35.5 kB
ganeti.utils.log_unittest.py 8.3 kB
ganeti.utils.lvm_unittest.py 4 kB
ganeti.utils.mlock_unittest.py 1.5 kB
ganeti.utils.nodesetup_unittest.py 4 kB
ganeti.utils.process_unittest.py 24.7 kB
ganeti.utils.retry_unittest.py 7.1 kB
ganeti.utils.security_unittest.py 3.9 kB
ganeti.utils.storage_unittest.py 4.2 kB
ganeti.utils.text_unittest.py 22.7 kB
ganeti.utils.version_unittest.py 3.8 kB
ganeti.utils.wrapper_unittest.py 5.1 kB
ganeti.utils.x509_unittest.py 13.4 kB
ganeti.utils_unittest.py 12.6 kB
ganeti.vcluster_unittest.py 8.7 kB
ganeti.workerpool_unittest.py 19.5 kB
gnt-cli.test 1.5 kB
import-export_unittest-helper 2.6 kB
import-export_unittest.bash 11.3 kB
lockperf.py 3.5 kB
mocks.py 3.2 kB
pycurl_reset_unittest.py 2.3 kB
qa.qa_config_unittest.py 13.7 kB
tempfile_fork_unittest.py 3.4 kB
testutils.py 6.6 kB

Latest revisions

# Date Author Comment
45f75526 01/24/2014 05:06 pm Helga Velroyen

Disabling client certificate usage

This patch temporarily disables the usage of the client
SSL certificates. The handling of RPC connections had a
conceptional flaw, because the certificates lack a proper
signature. For this, Ganeti needs to implement a CA,...
9b85ede9 01/13/2014 12:08 pm Klaus Aehlig

Add utility to compare versions

This will be needed, e.g., for post-upgrade task, as they
have to decide whether a feature was not yet present at
the version started from.

Signed-off-by: Klaus Aehlig <>
Reviewed-by: Hrvoje Ribicic <>
a6c43c02 12/20/2013 03:15 pm Helga Velroyen

Verify client certificates

This patch adds a step to 'gnt-cluster verify' to verify
the existence and validity of the nodes' client
certificates. Since this is a crucial point of the
security concept, the verification is very detailed with
expressive error messages and well tested by unit tests....
b3cc1646 12/20/2013 03:15 pm Helga Velroyen

Verify incoming RPCs against candidate map

From this patch on, incoming RPC calls are checked against
the map of valid master candidate certificates. If no map
is present, the cluster is assumed to be in
bootstrap/upgrade mode and compares the incoming call...
d722af8b 12/20/2013 03:15 pm Helga Velroyen

Extend RPC call to create SSL certificates

So far the RPC call 'node_crypto_tokens' did only retrieve
the certificate digest of an existing certificate. This
call is now enhanced to also create a new certificate and
return the respective digest. This will be used in various...
840ad2ab 12/20/2013 03:15 pm Helga Velroyen

Handle client certificates on node add/remove

This patch adds the certificate of a newly added or
readded master candidate node to the map of master candidate
certificates. It removes a master candidate node's certificate
digest from the candidate certificate map if the node is...
5b6f9e35 12/20/2013 03:15 pm Helga Velroyen

Add certificate for master node

On cluster initialization, the master node's
SSL certificate digest is added to the list of master
candidate certificates.

Signed-off-by: Helga Velroyen <>
Reviewed-by: Hrvoje Ribicic <>
3bcf2140 12/20/2013 03:15 pm Helga Velroyen

Add candiate certificate map to configuration

At the end of this patch series, incoming RPC calls are
legitimized against a map of master candidate nodes'
SSL certificate digests. This patch adds the map itself
to the cluster's configuration.

Signed-off-by: Helga Velroyen <>...
b544a3c2 12/20/2013 03:15 pm Helga Velroyen

Retrieve a node's certificate digest

In various cluster operations, the master node needs to
retrieve the digest of a node's SSL certificate. For this
purpose, we add an RPC call to retrieve the digest. The
function is designed in a general way to make it possible...
3338a9ce 12/20/2013 03:15 pm Helga Velroyen

Utility functions to manipulate the candidate map

This patch adds a couple of utility functions to manipulate
the map of master candidate SSL certificate digests.

Signed-off-by: Helga Velroyen <>
Reviewed-by: Hrvoje Ribicic <>

View revisions

Also available in: Atom