GitLab

Bugs/#8379/tls client certs v3

This could solve issues some people have encountered with errors on
provisionning, probably caused by different versions of OpenSSL libs as
expected by ruby, freshly installed and those present on the system but
not upgraded.

Error was:
Notice: /Stage[main]/Ruby/Exec[install rake]/returns:
/usr/lib/x86_64-linux-gnu/ruby/2.1.0/openssl.so: symbol SSLv2_method,
version OPENSSL_1.0.0 not defined in file libssl.so.1.0.0 with link time
reference - /usr/lib/x86_64-linux-gnu/ruby/2.1.0/openssl.so

This creates a local virtualhost listening on 8443 and configured to
require a ssl client cert.
Rails config file is updated so as to go to that url for outgoing
connection to the API using entries such as
  base_uri_out: https://127.0.0.1:8443
  uri_out_private_key_file: /etc/ssl/certs/clientkey_nopass.pem
  uri_out_cert_chain_file: /etc/ssl/certs/clientcert.pem

The complete environment can then be tested setup tunnels and running
against the development rails server

curl -kni http://127.0.0.1:8000/sites/rennes/jobs \
  -H'Accept: application/json' -H'Content-Type: application/json' \
  -d '{"resources": "nodes=1,walltime=00:05:00", "command": "while(true); do sleep 5;
  echo \"awake\"; done"}'

With this commit, the following tls options are supported and used if
present in the configuration file
- uri_out_cert_chain_file
- uri_out_private_key_file
- uri_out_verify_peer
- uri_out_fail_if_no_peer_cert
- uri_out_cipher_list
- uri_out_ecdh_curve
- uri_out_dhparam
- uri_out_ssl_version

- uri_in_cert_chain_file
- uri_in_private_key_file
- uri_in_verify_peer
- uri_in_fail_if_no_peer_cert
- uri_in_cipher_list
- uri_in_ecdh_curve
- uri_in_dhparam
- uri_in_ssl_version

fixes #8266

This should ease usage of the Vagrant box, no longer requiring usage of
`bundle exec` during development and tests

MARGERY David authored Jun 12, 2017 and Florent Didier committed Jun 21, 2017

This is to reduce diff to lnussbaum/jessie-rebased
(e698119d6dd76ba5b9c30336c69f58bc85e3ec8a) as much a possible
to understand more precisely the differences between the v3 branch and
the development branch

MARGERY David authored May 11, 2017 and Florent Didier committed Jun 21, 2017

This is a version of the script used to stress test the API that uses the public entry point

MARGERY David authored May 11, 2017 and Florent Didier committed Jun 21, 2017

This is to check whether the round-robin strategy in production is required

MARGERY David authored Dec 12, 2016 and Florent Didier committed Jun 21, 2017

This is to avoid having to use bundle exec in the vagrant box

BASU Anirvan authored Oct 26, 2016 and Florent Didier committed Jun 21, 2017

This only applies to sites containing servers (e.g. nancy in test repository)

The job description was built once for every resource. Instead, build it
once per job, and then just add the built description to each resource.

This is an optimization attempt for bug #7970.

BASU Anirvan authored Dec 12, 2016 and Lucas Nussbaum committed Jun 07, 2017

Modified the mechanism for URI construction - for test & development environments. Added spec tests also.