[8] Certificate store - Githubissues

certtools / intelmq

IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.

https://docs.intelmq.org/latest/

GNU Affero General Public License v3.0

976 stars 296 forks source link

[8] Certificate store #679

Open sebix opened 8 years ago

sebix commented 8 years ago

requests uses it's own store, which is basically a copy of mozilla's. The package by ubuntu-maintaines uses the system store.
sleekxmpp requires to get the path to a certificate store file. doc and code
imbox can use a SSLContext.

Idea: Set the path to the certificate store globally in the defaults.conf, optionally in the bots. The default should be currently /etc/ssl/certs/ca-certificates.crt (as debian/ubuntu is currently the primary platform), and for packages provide a proper default.

aaronkaplan commented 8 years ago

needed for AH connections

dmth commented 8 years ago

needed for AH connections

-> which is the xmpp-connection with sleekxmpp

I opt for the global store which can be configured in defaults (as suggested in https://github.com/certtools/intelmq/issues/532#issue-156972340), it should have a fallback to the systems store (if applicable), if no custom store was configured. Whilst implementing, remember the n6 collector which requires it's own CA.

aaronkaplan commented 8 years ago

Fine with me.

Mobile

On 06.10.2016, at 10:10, Dustin Demuth notifications@github.com wrote:

needed for AH connections

-> which is the xmpp-connection with sleekxmpp

I opt for the global store which can be configured in defaults, it should have a fallback to the systems store (if applicable), if no custom store was configured. Whilst implementing, remember the n6 collector which requires it's own CA.

— You are receiving this because you commented. Reply to this email directly, view it on GitHub, or mute the thread.