tree a54e098c8702af8d083a48de0aaf576a8cc84b93
parent 8ae37025d83533889be862d73d8ec701a818275a
author Kowalski, Kamil <kamil.kowalski@intel.com> 1562757177 +0200
committer James Feist <james.feist@linux.intel.com> 1573231926 +0000

TLS based user auth implementation

Implemented TLS based user auth. It utilizes certificates stored by
Phosphor Certificate Manager in storage mode, to verify that user
that tries to log in, has a certificate signed by a trusted CA.

More about this can be read in redfish-tls-user-authentication.md design
document.

Tested that it does not break current authentication methods, when not
using TLS Auth - user should not see difference between versions. TLS Auth
itself allows user in when certificate is signed by trusted CA and valid, and
stops working immediatley after it is removed. User is not let in when provided
certificate is not between notBefore and notAfter dates. Session is tested to
not be created when user does not exist in the system (courtesy of earlier
UserManagement usage commits).

Signed-off-by: Kowalski, Kamil <kamil.kowalski@intel.com>
Change-Id: I6bcaff018fe3105f77d3c10f69765e0011af8dab
Signed-off-by: Zbigniew Kurzynski <zbigniew.kurzynski@intel.com>