cyberark-conjur-cli
cyberark-conjur-cli copied to clipboard
Automation - Add certificate flows to pipeline
In the CLI we need to check against two different certificate flows, when the server is configured with:
- a verifiable ca-signed certificate (this task)
- a non-verifiable ca-signed certificate (current)
General Information
Python comes with a list of trusted CAs. Every certificate signed by those CAs will be considered as trusted certificate. Those CAs are located in a file called cacerts.pem. To get the path of this file, run in python3 -c "import certifi; print(certifi.where())". To make a certificate verifiable we need to add the root CA to that location!
Task
At a high level, we want to add the a verifiable ca-signed certificate to our test pipeline
- [ ] Automate the steps mentioned in this doc to create CA and generate CA-signed certificate
- [ ] Build the test binary artifact as described under the section Running tests with configurable environment here to allow the certificate to be verifiable
- [ ] Run the binary that will trigger the tests to run with a verifiable ca signed cert
NOTE: there should be two different containers for building the test artifact and for running it