ningyougang commented on issue #2427: Support client certificate on cli and nginx URL: https://github.com/apache/incubator-openwhisk/pull/2427#issuecomment-311570484 For above's suggestion two. i have tested it my local env, if the client certificate is not right, the test case will be failed (openwhisk-client-key1.pem doesn't exist) ``` whisk.core.cli.test.WskBasicUsageTests > Wsk CLI usage should set apihost, auth, cert, key and namespace FAILED org.scalatest.exceptions.TestFailedException: /home/irteam/jenkins/workspace/lambda/bin/wsk property set -i --apihost ${IP} --auth 23bc46b1-71f6-4ed5-8c54-816aa4f8c502:123zO3xZCLrMN6v2BKK1dXYFpXlPkccOFqm12CdAsMgRU4VrNZ9lyGVCGuMDGIwP --cert /home/irteam/jenkins/workspace/lambda/ansible/roles/nginx/files/openwhisk-client-cert1.pem --key /home/irteam/jenkins/workspace/lambda/ansible/roles/nginx/files/openwhisk-client-key1.pem --namespace guest ok: client cert set. Run 'wsk property get --cert' to see the new value. ok: client key set. Run 'wsk property get --key' to see the new value. ok: whisk auth set. Run 'wsk property get --auth' to see the new value. ok: whisk API host set to ${IP} error: Authenticated user does not have namespace 'guest'; set command failed: Get https://${IP}/api/v1/namespaces: x509: cannot validate certificate for ${IP} because it doesn't contain any IP SANs exit code: 1 was not equal to 0 at org.scalatest.MatchersHelper$.indicateFailure(MatchersHelper.scala:340) at org.scalatest.Matchers$AnyShouldWrapper.shouldBe(Matchers.scala:6864) at common.RunWskCmd$$anonfun$cli$1.apply(Wsk.scala:1019) at org.scalatest.Assertions$class.withClue(Assertions.scala:1221) ``` ---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected]
With regards, Apache Git Services
