Pavol Zacik
Pavol Zacik
Having used tuned-ppd by default for a couple of months, I've discovered a couple of bugs that should be resolved by this PR.
When TuneD is off, and a profile is applied using `tuned-adm profile`, the command attempts to start it. Before this change, the profile would always be applied via the `active_profile`...
In this PR, I add a global per-plugin configuration of dynamic tuning, which works as follows: 1. The boolean `dynamic_tuning` option stays as it is - it can be used...
This PR adds a new option `check_diff` to the function `commands.write_to_file`. When set to `True`, the function checks whether the current value is equal to the one being written -...
This PR changes the default locations of user and system profiles to `/etc/tuned/profiles/` and `/usr/lib/tuned/profiles/`, respectively. In Fedora and RHEL 10, existing user-defined profiles should also be automatically migrated. Only...
Currently, we export each chain as a single file `chain.pem` together with the root cert `root.pem`. This makes it hard to validate manually using command-line OpenSSL, since it only accepts...
We dropped the commands when shifting to the new system but agreed it would be nice to have them back. Solves #105.
OpenSSL does not return _any_ error message for the `unable_to_get_crl` example chain. It should return `X509_V_ERR_UNABLE_TO_GET_CRL`. Possible culprit might be the `load_cert_crl_http` function in `validation/client/openssl/client.c`. Its return value might not...
Currently, all clients validate CRL-related chains, but only the OpenSSL one supports CRL checking. This results in false mappings (see e.g. erroneous certificates for Botan error [`VERIFIED`](https://x509errors.org/botan#verified-link). The steps should...
There are missing prerequisites in some Makefile targets. This causes skipped builds with important changes. Look at: - `validation/Makefile` - `validation/certs/Makefile` There might be other ones.