Skip to content

Trust the production and lab job signing keys #113

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
plotnick merged 1 commit into from
Nov 6, 2026
Merged

Trust the production and lab job signing keys #113

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
11 changes: 0 additions & 11 deletions server/certs/sandbox.pem
View file
Open in desktop

This file was deleted.

11 changes: 11 additions & 0 deletions server/certs/support-shell-lab-a1.pem
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,11 @@
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
11 changes: 11 additions & 0 deletions server/certs/support-shell-production-a1.pem
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,11 @@
-----BEGIN CERTIFICATE-----
MIIBrDCCAVKgAwIBAgIUabiqiIIFqIh5XY3mMFSJUC8yjicwCgYIKoZIzj0EAwIw
VDELMAkGA1UEBhMCVVMxHzAdBgNVBAoMFk94aWRlIENvbXB1dGVyIENvbXBhbnkx
JDAiBgNVBAMMG1N1cHBvcnQgU2hlbGwgUHJvZHVjdGlvbiBBMTAiGA8yMDI2MTEw
NTE2MjEwM1oYDzIxMjYxMDEyMTYyMTAzWjBUMQswCQYDVQQGEwJVUzEfMB0GA1UE
CgwWT3hpZGUgQ29tcHV0ZXIgQ29tcGFueTEkMCIGA1UEAwwbU3VwcG9ydCBTaGVs
bCBQcm9kdWN0aW9uIEExMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAER0R2J/71
7Ok2C9o3mspibhnYdOEfYwpV6ttuCOsOg1J4btV/rTiw8mf1RhNVJlvajDVyvYlZ
y9M97jn08z+X4jAKBggqhkjOPQQDAgNIADBFAiAQAKpYlsB7/VE9VHkI/VXSa/mq
iIiQ2DGOAhkmj3T0xgIhAJtZE+9HiCbjWvVYWb9VrIUak52BFq3pLdOso7efEl1d
-----END CERTIFICATE-----
5 changes: 4 additions & 1 deletion server/src/main.rs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -31,7 +31,10 @@ use sush_server::{read_certs, seed_gossip};
const DEFAULT_ADDRESS: &str = "0.0.0.0:44444";
const ROOT_LOG_NAME: &str = "sush";
const REQUEST_MAX_BODY_BYTES: usize = 0xFFFF;
const TRUST_ANCHORS: &[&[u8]] = &[include_bytes!("../certs/sandbox.pem")];
const TRUST_ANCHORS: &[&[u8]] = &[
include_bytes!("../certs/support-shell-production-a1.pem"),
include_bytes!("../certs/support-shell-lab-a1.pem"),
];

#[derive(Parser)]
#[clap(name = "Oxide Support Shell Server")]
Expand Down