• Leigh B Stoller's avatar
    Add simple (initial) support passing encrypted secrets to the cluster CM, · 46757729
    Leigh B Stoller authored
    to be decrypted using the per-exp ssl keypair we create and store on the
    nodes. In this case, you can add this to your rspec in the node element.
    You can add as many as you want, use the name attribute. We generate a
    random password and encrypt the plain text:
    
      <emulab:password></emulab:password>
    
    which becomes:
    
        <emulab:password name="foo" encrypted="true">-----BEGIN PKCS7-----
    MIIBpAYJKoZIhvcNAQcDoIIBlTCCAZECAQAxggFMMIIBSAIBADCBsDCBqDELMAkG
    A1UEBhMCVVMxDTALBgNVBAgTBFV0YWgxFzAVBgNVBAcTDlNhbHQgTGFrZSBDaXR5
    MR0wGwYDVQQKExRVdGFoIE5ldHdvcmsgVGVzdGJlZDEPMA0GA1UECxMGQVBUTEFC
    MRcwFQYDVQQDEw53d3cuYXB0bGFiLm5ldDEoMCYGCSqGSIb3DQEJARYZdGVzdGJl
    ZC1vcHNAZmx1eC51dGFoLmVkdQIDAs8NMA0GCSqGSIb3DQEBAQUABIGAKeyo7mPO
    rHRF2G9t0h8/ALBBh7ChD1zCYvRFi2qvvUIIv/kfCNPhujRfodIYR65dP3tfM+BH
    VTRxjJrMYH63m8Fz9KMZlVYn+DhMeiwerqTxvVs823zyxcDrOUzTzzakWmJVSqvl
    33Po/7CYZ2iq67ATF1Xym3DsRQbQSuwgzu8wPAYJKoZIhvcNAQcBMB0GCWCGSAFl
    AwQBKgQQRw0kmvwhIur/ZlfFbB75qoAQXTKjzwN1HDJW4x5GAcWNPA==
    -----END PKCS7-----
        </emulab:password>
    
    which can then be decrypted using the private key to get the plaintext
    password.
    46757729
create_instance.in 45.4 KB