Unify certificate loading in EDGAR

eclipse-opendut / opendut

Test Electronic Control Units around the world in a transparent network.

https://opendut.eclipse.dev

Apache License 2.0

24 stars 13 forks source link

Unify certificate loading in EDGAR #263

Open mbfm opened 2 months ago

mbfm commented 2 months ago

For historic reasons, EDGAR loads certificates for the CarlClient directly, but for NetBird from the OS certificate store. Recently, the OS certificate also started being used for WebDAV, whereas Keycloak again uses the fixed certificate.

This should be changed to only use the certificates from a fixed certificate path.

Related: #249

reimarstier commented 1 month ago

In case of a custom certificate authority it would be best to load it from a common location and store the path to this file in the environment variable SSL_CERT_FILE. This variable should be specified in both, the EDGAR and NetBird service files. See #249