xCAT/confluent
2
0
Fork 0
mirror of https://github.com/xcat2/confluent.git synced 2026-04-16 05:41:27 +00:00
Code Issues Projects Releases Wiki Activity

Pass subject to the verifier in redfish

Browse Source
This commit is contained in:
Jarrod Johnson
2026-04-14 10:24:33 -04:00
parent 038faaab74
commit 5250a3a67a
1 changed files with 6 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
confluent_server/confluent/plugins/hardwaremanagement/redfish.py
View File

@@ -152,8 +152,12 @@ def sanitize_invdata(indata):
class IpmiCommandWrapper(ipmicommand.Command):
@classmethod
async def create(cls, node, cfm, **kwargs):
kv = util.TLSCertVerifier(
cfm, node, 'pubkeys.tls_hardwaremanager').verify_cert
htn = cfm.get_node_attributes(node, 'hardwaremanagement.manager_tls_name')
subject = htn.get(node, {}).get('hardwaremanagement.manager_tls_name', {}).get('value', None)
if not subject:
subject = kwargs['bmc']
kv = util.TLSCertVerifier(cfm, node,
'pubkeys.tls_hardwaremanager', subject).verify_cert
kwargs['verifycallback'] = kv
self = await super().create(**kwargs)
self.confluentbmcname = kwargs['bmc']
@@ -165,13 +169,6 @@ class IpmiCommandWrapper(ipmicommand.Command):
(node,), ('secret.hardwaremanagementuser', 'collective.manager',
'secret.hardwaremanagementpassword',
'hardwaremanagement.manager'), self._attribschanged)
htn = cfm.get_node_attributes(node, 'hardwaremanagement.manager_tls_name')
subject = htn.get(node, {}).get('hardwaremanagement.manager_tls_name', {}).get('value', None)
if not subject:
subject = kwargs['bmc']
kv = util.TLSCertVerifier(cfm, node,
'pubkeys.tls_hardwaremanager', subject).verify_cert
kwargs['verifycallback'] = kv
try:
pass
except socket.error as se: