Fixes #26942: Add new settings to handle certificate trust
https://issues.rudder.io/issues/26942
Add three new system variables whose value is taken from rudder properties file.
Looks good to me
After finding the proper option in curl, let's change how rudder.server.certificate.additionalKeyHash should be handled.
It must be a semicolon separated list of hash (not comma separated).
It must be appended to the existing key POLICY_SERVER_KEY_HASH in rudder.json, separated by a semicolon, (there must be no "empty" value in this list, ie no heading, trailing or successive semicolon)
ADDITIONAL_POLICY_SERVER_KEY_HASH system variable is not needed anymore
POLICY_SERVER_CERT_NAME_VALIDATION cannot be implemented as documented, we should replace it with : POLICY_SERVER_SECURE_VALIDATION : false/empty by default to match current state (--insecure is passed to curl)
PR updated with a new commit
This PR is not mergeable to upper versions.
Since it is "Ready for merge" you must merge it by yourself using the following command:
rudder-dev merge https://github.com/Normation/rudder/pull/6395
-- Your faithful QA
Kant merge: "Thoughts without content are empty, intuitions without concepts are blind."
(https://ci.normation.com/jenkins/job/merge-accepted-pr/103486/console)
We need a comprehensive documentation of the impact of these changes.
PR updated with a new commit
PR updated with a new commit
OK, squash merging this PR