diff options
| author | Stijn Tintel <stijn@linux-ipv6.be> | 2021-07-27 13:00:15 +0300 |
|---|---|---|
| committer | Stijn Tintel <stijn@linux-ipv6.be> | 2021-07-29 12:30:39 +0300 |
| commit | 653716eb19121752ad041a3faffc61777698e82a (patch) | |
| tree | 491abc4b151c90071b3151b7523ad04df1703760 /net/openvswitch/README.md | |
| parent | 2430c4ef82a58d9a2903785a8edef7392f49bea2 (diff) | |
openvswitch: add SSL support
Open vSwitch supports SSL to connect to an OpenFlow controller. This is
recommended for security. Expand the UCI ovs config section to allow
configuring SSL CA, certificate and private key.
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
Diffstat (limited to 'net/openvswitch/README.md')
| -rw-r--r-- | net/openvswitch/README.md | 13 |
1 files changed, 13 insertions, 0 deletions
diff --git a/net/openvswitch/README.md b/net/openvswitch/README.md index 5ed04d771..5cc8bbffe 100644 --- a/net/openvswitch/README.md +++ b/net/openvswitch/README.md @@ -69,6 +69,19 @@ ovs ovn_northd, ovn_controller & ovs_bridge. Each of these supports a disabled option, which should be set to 0 to launch the respective daemons. +The ovs section section also supports the options below, to configure a set of +SSL CA, certificate and private key. After adding these to Open vSwitch, you +may specify ssl: connection methods for e.g. the OpenFlow controller. Note that +Open vSwitch only reads these files during startup, so it needs to be restarted +after adding or changing these options. + +| Name | Type | Required | Default | Description | +|----------|---------|----------|---------|-----------------------------------| +| disabled | boolean | no | 0 | If set to 1, do not configure SSL | +| ca | string | no | (none) | Path to CA certificate | +| cert | string | no | (none) | Path to certificate | +| key | string | no | (none) | Path to private key | + The ovs_bridge section also supports the options below, for initialising a virtual bridge with an OpenFlow controller. |