vmware-nsx/doc/source
Anna Khmelnitsky 6e1a21881e NSXV3: Initial client certificate auth support
Client certificate authentication is disabled by default.
To enable client auth, define the following in nsx.ini:
nsx_use_client_auth = True
nsx_client_cert_storage = nsx-db
nsx_client_cert_file = <file to store certificate and private key>

To enable client auth in devstack, define the following in local.conf:
NSX_USE_CLIENT_CERT_AUTH=True

This commit covers only DB type of cert storage. Barbican storage
and imported cert will be added later. Also planned for near future:

    reload cert from DB if NSX connection failes due to bad cert
    show warning when cert nears expiration
    delete cert file from file system on neutron exit

Change-Id: Ic70a949b740d9149d71187b02640d3071a3e0159
2017-02-02 09:39:18 +00:00
..
admin_util.rst NSXV3: Initial client certificate auth support 2017-02-02 09:39:18 +00:00
conf.py Remove white space between print and () 2016-07-11 09:36:49 +00:00
contributing.rst VMware: fix gitreview 2014-12-21 23:24:18 -08:00
history.rst VMware: fix gitreview 2014-12-21 23:24:18 -08:00
index.rst VMware: fix gitreview 2014-12-21 23:24:18 -08:00
installation.rst VMware: fix gitreview 2014-12-21 23:24:18 -08:00
readme.rst VMware: fix gitreview 2014-12-21 23:24:18 -08:00
usage.rst VMware: fix gitreview 2014-12-21 23:24:18 -08:00