Skip to content

[cleanup] Consolidate certs used in tests#48

Closed
michaeljmarshall wants to merge 1 commit into
masterfrom
consolidate-certs-tests
Closed

[cleanup] Consolidate certs used in tests#48
michaeljmarshall wants to merge 1 commit into
masterfrom
consolidate-certs-tests

Conversation

@michaeljmarshall

Copy link
Copy Markdown
Owner

PR for tests

@michaeljmarshall michaeljmarshall force-pushed the consolidate-certs-tests branch from c7cdf0e to 1bab09a Compare May 16, 2023 17:12
@michaeljmarshall michaeljmarshall changed the title Consolidate certs tests [cleanup] Consolidate certs used in tests May 16, 2023
@michaeljmarshall michaeljmarshall force-pushed the consolidate-certs-tests branch from 1bab09a to 05342e9 Compare May 17, 2023 02:07
@michaeljmarshall michaeljmarshall deleted the consolidate-certs-tests branch May 17, 2023 15:29
michaeljmarshall added a commit to apache/pulsar that referenced this pull request May 17, 2023
Builds on: #20289

### Motivation

There are many certificates in our test code base. It would be much simpler to have one place were we create and manage certificates so that when we need to make changes, they are consolidated.

There is likely one or two more PRs to finish consolidating certs.

### Modifications

* Remove certs that are no longer used
* Replace references to old certs with references to the `certificate-authority` certs
* Create new server certs with valid hostnames on them so that tests will pass. Document the process used to create these certs.
* Fix an issue in the `PulsarTestContext` where the configuration was not correctly updated.
* Remove configurations that allow for insecure connections in tests that are doing some kind of TLS verification. The only places where we leave insecure validation in place is tests that are specifically verifying the functionality.
* Copy `certificate-authority` to the relevant `bouncy-castle` directory

### Verifying this change

When tests pass, this change will be correctly verified.

### Documentation

- [x] `doc`
This PR includes doc changes

### Matching PR in forked repository

PR in forked repository: michaeljmarshall#48
lhotari pushed a commit to apache/pulsar that referenced this pull request Jan 26, 2024
Builds on: #20289

There are many certificates in our test code base. It would be much simpler to have one place were we create and manage certificates so that when we need to make changes, they are consolidated.

There is likely one or two more PRs to finish consolidating certs.

* Remove certs that are no longer used
* Replace references to old certs with references to the `certificate-authority` certs
* Create new server certs with valid hostnames on them so that tests will pass. Document the process used to create these certs.
* Fix an issue in the `PulsarTestContext` where the configuration was not correctly updated.
* Remove configurations that allow for insecure connections in tests that are doing some kind of TLS verification. The only places where we leave insecure validation in place is tests that are specifically verifying the functionality.
* Copy `certificate-authority` to the relevant `bouncy-castle` directory

When tests pass, this change will be correctly verified.

- [x] `doc`
This PR includes doc changes

PR in forked repository: michaeljmarshall#48

(cherry picked from commit d45a220)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant