[pre-flight check] verify the CA chain using openssl verify

qlik-oss / sense-installer

Sense Installer is a QSEoK installer and operator

Apache License 2.0

3 stars 0 forks source link

[pre-flight check] verify the CA chain using openssl verify #377

Open ffoysal opened 4 years ago

ffoysal commented 4 years ago

openssl s_client -connect www.test.edwh.internalservice.dbs.gov.uk:443 -showcerts openssl verify -verbose -CAfile ca.pem server.pem

url:

Discover url from CR
Mongo
license backend

ashwathishiva commented 4 years ago

PR is here: https://github.com/qlik-oss/sense-installer/pull/436

This check has been implemented to run over mongodbUrl and discoveryUrl from CR.

ashwathishiva commented 4 years ago

another PR: https://github.com/qlik-oss/sense-installer/pull/438

FYI: We are verifying the server certificate against our ca certificate(we retrieved from CR). We are not processing intermediate certificates at this point.