Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  • The SSL offload will be defined as a Capability in LbSchemes as SSL
  • NetscalerElement when checking for canHandleLbRules will check for SSL rule and respond accordingly
  • LoadBalancerTO will have a new parameter for passing certificate information.

New

...

This section lists the new webservice APIs for Certificate management. They are derived from their AWS Equivalant ( UploadServerCertificate, ListServerCertificates, GetServerCertificate, DeleteServerCertificate )

uploadSSLCert

Uploads a new SSL certificate-key pair

Request parameters:

  • cert : Required : The public certificate, should also include the trust chain if required
  • key : Required : The private key for the certificate, if the key is encrypted, password should be provided
  • password: Optional : The password for the private key

New tables:

ssl_certs(id, uuid, account_id, cert, key, password)

Field name

Type

Allow nulls

Key

Default value

id

bigint(20) unsigned

No

Primary

Null

uuid

varchar(40)

Yes

Unique

Null

account_id

bigint(20)

No

Mul

Null

cert

varchar(255)

No

None

Null

key

varchar(255)

No

None

Null

password

varchar(255)

Yes

None

Null

created

datatime

Yes

None

Null

load_balancer_cert_map(id, load_balancer_id, cert_id, revoke, state)

Field name

Type

Allow nulls

Key

Default value

id

bigint(20) unsigned

No

Primary

Null

load_balancer_id

bigint(20)

No

Mul

Null

cert_id

bigint(20)

No

Mul

Null

revoke

tinyint(1)

No

None

0

state

varchar(40)

YES

None

NULL

New Webservice APIs for Certificate Management

This section lists the new webservice APIs for Certificate management. They are derived from their AWS Equivalant ( UploadServerCertificate, ListServerCertificates, GetServerCertificate, DeleteServerCertificate )

uploadSSLCert

Uploads a new SSL certificate-key pair

Request parameters:

  • cert : Required : The public certificate, should also include the trust chain if required
  • key : Required : The private key for the certificate, if the key is encrypted, password should be provided
  • password: Optional : The password for the private key

deleteSSLCert

Deletes an existing SSL cert from cloudstack.

...

  • certificateid: Optional : The id of the certificate to assign to this rule.

New tables:

load_balancer_cert_map(id, load_balancer_id, cert_id, revoke, state)

...

Field name

...

Type

...

Allow nulls

...

Key

...

Default value

...

id

...

bigint(20) unsigned

...

No

...

Primary

...

Null

...

load_balancer_id

...

bigint(20)

...

No

...

Mul

...

Null

...

cert_id

...

bigint(20)

...

No

...

Mul

...

Null

...

revoke

...

tinyint(1)

...

No

...

None

...

0

...

state

...

varchar(40)

...

YES

...

None

...

removeFromLoadBalancerRule

...