Skip to content

[PURIFY] Remove certs and PKCS12 files temporarily#616

Merged
mihirsoni merged 1 commit intoopensearch-project:mainfrom
kavilla:avillk/temp-remove-certs
Jul 9, 2021
Merged

[PURIFY] Remove certs and PKCS12 files temporarily#616
mihirsoni merged 1 commit intoopensearch-project:mainfrom
kavilla:avillk/temp-remove-certs

Conversation

@kavilla
Copy link
Copy Markdown
Member

@kavilla kavilla commented Jul 9, 2021

Description

Removed the generated keys from Elastic. Since we did not own those
and do not have the private key for the cert authority then it will
be safer.

This should not have any impact on runtime, might impact security
related to x-pack with demo certs but none of the certs where
for production. Otherwise, this is strictly for testing.

To be clear, this can be emptied out because it is ONLY for demo
and testing purposes. The demo security can be accomplished by
using:

https://github.com/opensearch-project/security/blob/main/tools/install_demo_configuration.sh

Eventually we should take the certs from that file and copy those over but will
just ignore the tests for now.

Signed-off-by: Kawika Avilla kavilla414@gmail.com

Issues Resolved

Purposefully didn't created one.

Check List

  • New functionality includes testing.
    • All tests pass
  • New functionality has been documented.
    • New functionality has javadoc added
  • Commits are signed per the DCO using --signoff

@kavilla kavilla requested review from ananzh and tmarkley July 9, 2021 17:09
@opensearch-ci-bot
Copy link
Copy Markdown
Collaborator

✅   DCO Check Passed 99892b2

Copy link
Copy Markdown
Member

@ananzh ananzh left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nice. just one comment

Comment thread packages/osd-opensearch/src/integration_tests/cluster.test.js
Removed the generated keys from Elastic. Since we did not own those
and do not have the private key for the cert authority then it will
be safer.

This should not have any impact on runtime, might impact security
related to x-pack with demo certs but none of the certs where
for production. Otherwise, this is strictly for testing.

To be clear, this can be emptied out because it is ONLY for demo
and testing purposes. The demo security can be accomplished by
using:

https://github.com/opensearch-project/security/blob/main/tools/install_demo_configuration.sh

Eventually we should take the certs from that file and copy those over but will
just ignore the tests for now.

Signed-off-by: Kawika Avilla <kavilla414@gmail.com>
@kavilla kavilla force-pushed the avillk/temp-remove-certs branch from 99892b2 to de245fb Compare July 9, 2021 18:10
@opensearch-ci-bot
Copy link
Copy Markdown
Collaborator

✅   DCO Check Passed de245fb

Copy link
Copy Markdown
Member

@ananzh ananzh left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nice. thanks rocky for this. ❤️

Copy link
Copy Markdown
Contributor

@mihirsoni mihirsoni left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM !!

@mihirsoni mihirsoni merged commit f972c87 into opensearch-project:main Jul 9, 2021
kavilla added a commit to kavilla/OpenSearch-Dashboards-1 that referenced this pull request Jul 9, 2021
…t#616)

Removed the generated keys from Elastic. Since we did not own those
and do not have the private key for the cert authority then it will
be safer.

This should not have any impact on runtime, might impact security
related to x-pack with demo certs but none of the certs where
for production. Otherwise, this is strictly for testing.

To be clear, this can be emptied out because it is ONLY for demo
and testing purposes. The demo security can be accomplished by
using:

https://github.com/opensearch-project/security/blob/main/tools/install_demo_configuration.sh

Eventually we should take the certs from that file and copy those over but will
just ignore the tests for now.

Signed-off-by: Kawika Avilla <kavilla414@gmail.com>
kavilla added a commit that referenced this pull request Jul 9, 2021
Removed the generated keys from Elastic. Since we did not own those
and do not have the private key for the cert authority then it will
be safer.

This should not have any impact on runtime, might impact security
related to x-pack with demo certs but none of the certs where
for production. Otherwise, this is strictly for testing.

To be clear, this can be emptied out because it is ONLY for demo
and testing purposes. The demo security can be accomplished by
using:

https://github.com/opensearch-project/security/blob/main/tools/install_demo_configuration.sh

Eventually we should take the certs from that file and copy those over but will
just ignore the tests for now.

Signed-off-by: Kawika Avilla <kavilla414@gmail.com>
kavilla added a commit to kavilla/OpenSearch-Dashboards-1 that referenced this pull request Jul 9, 2021
Removed the generated keys from Elastic. Since we did not own those
and do not have the private key for the cert authority then it will
be safer.

This should not have any impact on runtime, might impact security
related to x-pack with demo certs but none of the certs where
for production. Otherwise, this is strictly for testing.

To be clear, this can be emptied out because it is ONLY for demo
and testing purposes. The demo security can be accomplished by
using:

https://github.com/opensearch-project/security/blob/main/tools/install_demo_configuration.sh

Eventually we should take the certs from that file and copy those over but will
just ignore the tests for now.

Original PR:
opensearch-project#616

Signed-off-by: Kawika Avilla <kavilla414@gmail.com>
ananzh pushed a commit that referenced this pull request Jul 11, 2021
Removed the generated keys from Elastic. Since we did not own those
and do not have the private key for the cert authority then it will
be safer.

This should not have any impact on runtime, might impact security
related to x-pack with demo certs but none of the certs where
for production. Otherwise, this is strictly for testing.

To be clear, this can be emptied out because it is ONLY for demo
and testing purposes. The demo security can be accomplished by
using:

https://github.com/opensearch-project/security/blob/main/tools/install_demo_configuration.sh

Eventually we should take the certs from that file and copy those over but will
just ignore the tests for now.

Original PR:
#616

Signed-off-by: Kawika Avilla <kavilla414@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants