Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  • The SSL certificates should include the chain trust with them. They are added to the device as-is
  • For the netscaler loadbalancer, we assume that the port 22 is open and there is space in /nsconfig as we scp the certificate to the device
  • A loadbalancer rule can have only one certificate attached to it. A certificate however can be attached to multiple loadbalancers ( As long they are SSL type )

Design

New Webservice APIs for Certificate Management

...

Field name

Type

Allow nulls

Key

Default value

id

bigint(20) unsigned

No

Primary

Null

uuid

varchar(40)

Yes

None

Null

account_id

bigint(20)

No

None

Null

cert

varchar(255)

Yes

None

Null

key

varchar(255)

Yes

None

Null

password

varchar(255)

Yes

None

Null

removed

datatime

Yes

None

Null

deleteSSLCert

Deletes an existing SSL cert from cloudstack.

...

load_balancer_cert_map(id, load_balancer_id, cert_id, revoke, state)

Field name

Type

Allow nulls

Key

Default value

id

bigint(20) unsigned

No

Primary

Null

load_balancer_id

bigint(20)

No

Mul

Null

cert_id

bigint(20)

No

Mul

Null

revoke

tinyint(1)

No

None

0

state

varchar(40)

YES

None

NULL

removeFromLoadBalancerRule

...