Skip to content

Add zenoh_security_tools#595

Merged
Yadunund merged 11 commits into
rollingfrom
yadu/security
Apr 7, 2025
Merged

Add zenoh_security_tools#595
Yadunund merged 11 commits into
rollingfrom
yadu/security

Conversation

@Yadunund
Copy link
Copy Markdown
Member

@Yadunund Yadunund commented Apr 5, 2025

Builds off #592 to also inject security certificates generated by sros2 into the session and router configs. Takes logic from #412 and adds it to the config files instead.

See README.md for complete instructions on running a talker-listener demo with access control, authentication and encryption.

ahcorde and others added 10 commits March 4, 2025 22:38
Signed-off-by: Alejandro Hernandez Cordero <[email protected]>
Since we have the dependency now via #583, this is a potential
improvement to the current string concatenation.

Signed-off-by: Michael Carroll <[email protected]>
Signed-off-by: Michael Carroll <[email protected]>
Signed-off-by: Yadunund <[email protected]>
@Yadunund
Copy link
Copy Markdown
Member Author

Yadunund commented Apr 5, 2025

CI started with yadu/security branch
BUILD_ARGS: --packages-up-to zenoh_security_tools
TEST_ARGS: --packages-select zenoh_security_tools

  • Linux Build Status
  • Linux-aarch64 Build Status
  • Linux-rhel Build Status
  • Windows Build Status

Copy link
Copy Markdown
Member

@mjcarroll mjcarroll left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Changes against what was there look good, I haven't tested locally yet. Looks like you are missing CLI11 in the CI run, though? Has something changed because that was working yesterday.

@Yadunund
Copy link
Copy Markdown
Member Author

Yadunund commented Apr 5, 2025

Changes against what was there look good, I haven't tested locally yet. Looks like you are missing CLI11 in the CI run, though? Has something changed because that was working yesterday.

I don't think we ran CI before? We'll need to add CLI11 to the curated list of dependencies for CI jobs in the dockerfile https://github.com/ros2/ci/blob/cab2da7ecea03936e50103df6ee91d9489a2c617/linux_docker_resources/Dockerfile#L55 and in the pixi.toml.

I'm actually leaning towards dropping the dependency to avoid the trouble....

Signed-off-by: Yadunund <[email protected]>
@Yadunund
Copy link
Copy Markdown
Member Author

Yadunund commented Apr 5, 2025

CI started with yadu/security branch
BUILD_ARGS: --packages-up-to zenoh_security_tools
TEST_ARGS: --packages-select zenoh_security_tools

  • Linux Build Status
  • Linux-aarch64 Build Status
  • Linux-rhel Build Status
  • Windows Build Status

@Yadunund Yadunund merged commit 1dca3c3 into rolling Apr 7, 2025
4 of 5 checks passed
@Yadunund Yadunund deleted the yadu/security branch April 7, 2025 00:12
@Yadunund
Copy link
Copy Markdown
Member Author

@Mergifyio backport jazzy humble

@mergify
Copy link
Copy Markdown

mergify Bot commented Apr 20, 2025

backport jazzy humble

✅ Backports have been created

Details

mergify Bot pushed a commit that referenced this pull request Apr 20, 2025
* Added zenoh_security_configuration_tools package written in cpp

Signed-off-by: Alejandro Hernandez Cordero <[email protected]>

* Added domain id

Signed-off-by: Alejandro Hernandez Cordero <[email protected]>

* Update policy_parser to use nlohmann_json.hpp

Since we have the dependency now via #583, this is a potential
improvement to the current string concatenation.

Signed-off-by: Michael Carroll <[email protected]>

* Further json changes

Signed-off-by: Michael Carroll <[email protected]>

* Refactor package to zenoh_security_tools

Signed-off-by: Yadunund <[email protected]>

* Inject certificates if enclaves provided

Signed-off-by: Yadunund <[email protected]>

* Replace existing endpoints with tls instead of hardcoded changes

Signed-off-by: Yadunund <[email protected]>

* Update README.md

Signed-off-by: Yadunund <[email protected]>

* Also generate router config with security

Signed-off-by: Yadunund <[email protected]>

* Drop CLI11 dependency

Signed-off-by: Yadunund <[email protected]>

---------

Signed-off-by: Alejandro Hernandez Cordero <[email protected]>
Signed-off-by: Michael Carroll <[email protected]>
Signed-off-by: Yadunund <[email protected]>
Co-authored-by: Alejandro Hernandez Cordero <[email protected]>
Co-authored-by: Michael Carroll <[email protected]>
(cherry picked from commit 1dca3c3)
mergify Bot pushed a commit that referenced this pull request Apr 20, 2025
* Added zenoh_security_configuration_tools package written in cpp

Signed-off-by: Alejandro Hernandez Cordero <[email protected]>

* Added domain id

Signed-off-by: Alejandro Hernandez Cordero <[email protected]>

* Update policy_parser to use nlohmann_json.hpp

Since we have the dependency now via #583, this is a potential
improvement to the current string concatenation.

Signed-off-by: Michael Carroll <[email protected]>

* Further json changes

Signed-off-by: Michael Carroll <[email protected]>

* Refactor package to zenoh_security_tools

Signed-off-by: Yadunund <[email protected]>

* Inject certificates if enclaves provided

Signed-off-by: Yadunund <[email protected]>

* Replace existing endpoints with tls instead of hardcoded changes

Signed-off-by: Yadunund <[email protected]>

* Update README.md

Signed-off-by: Yadunund <[email protected]>

* Also generate router config with security

Signed-off-by: Yadunund <[email protected]>

* Drop CLI11 dependency

Signed-off-by: Yadunund <[email protected]>

---------

Signed-off-by: Alejandro Hernandez Cordero <[email protected]>
Signed-off-by: Michael Carroll <[email protected]>
Signed-off-by: Yadunund <[email protected]>
Co-authored-by: Alejandro Hernandez Cordero <[email protected]>
Co-authored-by: Michael Carroll <[email protected]>
(cherry picked from commit 1dca3c3)
Yadunund added a commit that referenced this pull request Apr 20, 2025
* Added zenoh_security_configuration_tools package written in cpp

Signed-off-by: Alejandro Hernandez Cordero <[email protected]>

* Added domain id

Signed-off-by: Alejandro Hernandez Cordero <[email protected]>

* Update policy_parser to use nlohmann_json.hpp

Since we have the dependency now via #583, this is a potential
improvement to the current string concatenation.

Signed-off-by: Michael Carroll <[email protected]>

* Further json changes

Signed-off-by: Michael Carroll <[email protected]>

* Refactor package to zenoh_security_tools

Signed-off-by: Yadunund <[email protected]>

* Inject certificates if enclaves provided

Signed-off-by: Yadunund <[email protected]>

* Replace existing endpoints with tls instead of hardcoded changes

Signed-off-by: Yadunund <[email protected]>

* Update README.md

Signed-off-by: Yadunund <[email protected]>

* Also generate router config with security

Signed-off-by: Yadunund <[email protected]>

* Drop CLI11 dependency

Signed-off-by: Yadunund <[email protected]>

---------

Signed-off-by: Alejandro Hernandez Cordero <[email protected]>
Signed-off-by: Michael Carroll <[email protected]>
Signed-off-by: Yadunund <[email protected]>
Co-authored-by: Alejandro Hernandez Cordero <[email protected]>
Co-authored-by: Michael Carroll <[email protected]>
(cherry picked from commit 1dca3c3)

Co-authored-by: yadunund <[email protected]>
Yadunund added a commit that referenced this pull request Apr 20, 2025
Yadunund added a commit that referenced this pull request Apr 20, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants