Upgrade gen-certs.py to produce v3 compliant certificates

GENI-NSF / geni-tools

Omni, stitcher, GCF sample aggregate manager, and other GENI tools.

Other

11 stars 15 forks source link

Upgrade gen-certs.py to produce v3 compliant certificates #155

Open tcmitchell opened 9 years ago

tcmitchell commented 9 years ago

gen-certs.py produces certificates that are not compliant with GENI AM API v3. See http://groups.geni.net/geni/wiki/GeniApiCertificates for details.

For instance:

Serial numbers are not unique
Fields in SubjectAltName
Username matches restrictions on GENI user names

Imported from trac ticket #155, created by tmitchel on 08-02-2012 at 15:00, last modified: 06-20-2014 at 14:11

ahelsing commented 9 years ago

For serial number: write the last used number to gcf_config, so we can increment next time For email address: get CH and AM email address from gcf_config and experimenter email address from the command line.

Adding UUIDs and checking username restrictions is easier.

Trac comment by ahelsing on 09-13-2012 at 14:25