Kyle,
Thank you. I’ll take a look at your notes, examples and blog posts. The
apple certificate utility is really neat. It makes creating a CA, CSR, Cert
and device keys really simple. After following the Jupyter OpenSSL
instructions I notice that SSL is being applied in Mozilla. I added the OpenSSL
key to my Safari Key chain and now Safaris is very slow, but I can get in to
Jupyter. I thought If I specify a CA file, that the server should be able to
allow access to any signed certificate from that CA if it has Client Access
permissions. Further, Jupyter doesn’t need to be able to decrypt the stream,
the browser does. I wonder if it has something to do with the clustering
configuration and resource pools.
sincerely,
Jesse Bacon
> On Nov 10, 2016, at 12:11 PM, Kyle Kelley <[email protected]> wrote:
>
> I was hoping to get strict PKI working sometime ago yet don't have the time
> to finish it off: https://github.com/jupyter/notebook/issues/1308
> <https://github.com/jupyter/notebook/issues/1308>
>
> On Thu, Nov 10, 2016 at 5:37 AM, Jesse Bacon <[email protected]
> <mailto:[email protected]>> wrote:
> Jupyter Community,
>
> The Jupyter notebook configuration file suggests that SSL client
> authentication is possible using a CA certificate file. I assume this works
> with Jupyter hub but I have not had a chance to test it yet. Is there a
> guide out there that has the SSL client authentication steps for Jupyter
> notebook? I tried creating a server certificate and a client certificate
> from the same CA using the Apple certificate utility and it has not yielded
> any promising results. The Jupyter server is complaining to me that it
> cannot find the key. I'm not sure why it needs the key file, I am giving it
> the PEM already, as well as a CA certificate. Isn't that enough to verify
> client certificates? I'm under a deadline or I would have started on Jupyter
> hub before posting this.
>
> Thank you for community support.
>
> sincerely,
>
> Jesse Bacon
>
> --
> You received this message because you are subscribed to the Google Groups
> "Project Jupyter" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected]
> <mailto:[email protected]>.
> To post to this group, send email to [email protected]
> <mailto:[email protected]>.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/jupyter/147be9c1-963c-48e7-a081-c080677a861b%40googlegroups.com
>
> <https://groups.google.com/d/msgid/jupyter/147be9c1-963c-48e7-a081-c080677a861b%40googlegroups.com?utm_medium=email&utm_source=footer>.
> For more options, visit https://groups.google.com/d/optout
> <https://groups.google.com/d/optout>.
>
>
>
> --
> Kyle Kelley (@rgbkrk <https://twitter.com/rgbkrk>; lambdaops.com
> <http://lambdaops.com/>)
>
> --
> You received this message because you are subscribed to a topic in the Google
> Groups "Project Jupyter" group.
> To unsubscribe from this topic, visit
> https://groups.google.com/d/topic/jupyter/PhSNYuDYn9E/unsubscribe
> <https://groups.google.com/d/topic/jupyter/PhSNYuDYn9E/unsubscribe>.
> To unsubscribe from this group and all its topics, send an email to
> [email protected]
> <mailto:[email protected]>.
> To post to this group, send email to [email protected]
> <mailto:[email protected]>.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/jupyter/CA%2BtbMaXumpuP5Ddd1urSZ33erVWDygV6aF38BRxnLsaY3Q1tqg%40mail.gmail.com
>
> <https://groups.google.com/d/msgid/jupyter/CA%2BtbMaXumpuP5Ddd1urSZ33erVWDygV6aF38BRxnLsaY3Q1tqg%40mail.gmail.com?utm_medium=email&utm_source=footer>.
> For more options, visit https://groups.google.com/d/optout
> <https://groups.google.com/d/optout>.
--
You received this message because you are subscribed to the Google Groups
"Project Jupyter" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/jupyter/F5E5D5CD-651B-4CA9-9700-29F64BD70B22%40gmail.com.
For more options, visit https://groups.google.com/d/optout.
