Use Certipy's trust graph to set up internal_ssl

With changes to CHP requiring a second, different
authority, the complexity of managing trust within
JupyterHub has risen. To solve this, Certipy now
has a feature to specify what components should
trust what and builds trust bundles accordingly.
This commit is contained in:
Thomas Mendoza
2018-09-12 17:46:39 -07:00
parent ca33ccd66d
commit 67f19a65b7
8 changed files with 142 additions and 81 deletions

View File

@@ -63,12 +63,10 @@ def app(request, io_loop, ssl_tmpdir):
ssl_enabled = getattr(request.module, "ssl_enabled", False)
if ssl_enabled:
internal_authority_name = 'hub'
external_certs = ssl_setup(str(ssl_tmpdir), internal_authority_name)
external_certs = ssl_setup(str(ssl_tmpdir), 'hub-ca')
mocked_app = MockHub.instance(
log_level=logging.DEBUG,
internal_ssl=True,
internal_authority_name=internal_authority_name,
internal_certs_location=str(ssl_tmpdir))
@gen.coroutine