search

opiproject / opi-prov-life

Provisioning, Lifecycle and Platform Management Group
Apache License 2.0
18 stars 26 forks source link

sztp: switch to `httpS` and use certificates #113

Closed glimchb closed 2 years ago

glimchb commented 2 years ago

instead of

 docker-compose run --rm -T agent curl -i --fail -H Accept:application/yang-data+json http://bootstrap:1080/.well-known/host-meta
HTTP/1.1 200 OK
Content-Type: application/xrd+xml; charset=utf-8
Content-Length: 104
Date: Wed, 17 Aug 2022 00:29:54 GMT
Server: <redacted>

<XRD xmlns="http://docs.oasis-open.org/ns/xri/xrd-1.0">
  <Link rel="restconf" href="/restconf"/>
</XRD>

do 

cat pki/sztpd1/sbi/root-ca/my_cert.pem pki/sztpd1/sbi/intermediate1/my_cert.pem  > /tmp/trust_chain.pem

curl  -i --fail -H Accept:application/yang-data+json --cacert /tmp/trust_chain.pem --key pki/client/end-entity/private_key.pem --cert pki/client/end-entity/my_cert.pem --user my-serial-number:my-secret https://bootstrap:9090/.well-known/host-meta
curl: (35) error:1408F10B:SSL routines:ssl3_get_record:wrong version number