12385518213
80%

Ran 18 Dec 2024 03:02AM UTC

Jobs 1

Files 37

Run time 1min

Badge

Embed ▾

Committed 17 Dec 2024 02:19PM UTC coverage: 78.273%. Remained the same

Build # 12385518213

Build Type

push

github

Committed by

web-flow

Commit Message

CA-403767: verifyPeer can't use root CA for appliance cert check (#6187)

It is expected to use root CA certficate to verify an appliance's server
certificate for a xapi outgoing TLS connection.

Prior to this change, the related stunnel configurations are:
"verifyPeer=yes", and "checkHost=<hostname>".

The 'verifyPeer' option of stunnel doesn't treat the CA bundle as root
CA certificates. The 'checkHost' option of stunnel only checks the
host name against the one in server certificate. In other words, the
issue is that the root CA based checking doesn't work for appliance.

This change adds 'verifyChain' for the appliance to ensure the outgoing
TLS connection from xapi will verify the appliance's server certificates
by real root CA certificate.

Run Details

3462 of 4423 relevant lines covered (78.27%)

0.78 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	python3.11 - 12385518213.1	18 Dec 2024 03:02AM UTC	37	78.27	GitHub Action Run

xapi-project / xen-api / 12385518213
80%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 12385518213

xapi-project / xen-api / 12385518213 80%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 12385518213

xapi-project / xen-api / 12385518213
80%

README BADGES
x