Support secure WinRM Transport

packer-community / packer-windows-plugins

A suite of Packer plugins for provisioning Windows machines

113 stars 20 forks source link

Support secure WinRM Transport #30

Open mefellows opened 9 years ago

mefellows commented 9 years ago

Now that WinRM supports a secure transport, we should include this in our Communicator to improve security for public cloud provisioning.

Some thoughts on implementation

Ideally this is a Communicator wide implementation, not specific to a builder
Also ideally, we automatically create a local CA, client certs and install into remote machine during boot
Allow user to specific CA/Certs if they don't want a default PKI implementation
Allow insecure mode where certs are automatically accepted

jen20 commented 9 years ago

I'm currently working on this, have things mostly working. Trying to keep it in pure Go at the moment rather than implicitly depending on OpenSSL, though creating a Windows-compatible certificate seems problematic.

mefellows commented 9 years ago

Awesome! Jump on Slack if you want to discuss detail.

jen20 commented 9 years ago

Does it need an invite?

mefellows commented 9 years ago

Oh yeah. Hit me up on twitter via DM with your email and I'll send one thru

mefellows commented 9 years ago

Created branch for implementation of this feature: https://github.com/packer-community/packer-windows-plugins/tree/secure-communicator