Cluster-nodes use client keys for authentication

Signed-off-by: Mark Hannum <mhannum@bloomberg.net>

Author: markhannum

tests/setup

@@ -285,6 +285,7 @@ setup_db() {
         REP_ENV_VARS="${DBDIR}/replicant_env_vars"
         #echo "export COMDB2_ROOT=$COMDB2_ROOT" >> ${REP_ENV_VARS}
         echo "export COMDB2_ROOT=$TESTDIR" >> ${REP_ENV_VARS}
+        echo "export CDB2_CONFIG_FILE=$CDB2_CONFIG" >> ${REP_ENV_VARS}
         CMD="cd ${DBDIR}; source ${REP_ENV_VARS} ; ${DEBUG_PREFIX} $COMDB2_EXE ${DBNAME} ${PARAMS} 2>&1 | tee $TESTDIR/${DBNAME}.db"
         echo "!$TESTCASE: starting"
         for node in $CLUSTER; do
@@ -301,6 +302,7 @@ setup_db() {
             if [[ -n ${DEBUG_PREFIX} && ${INTERACTIVE_DEBUG} -eq 1 ]]; then
                 echo -e "!$TESTCASE: Execute the following command on ${node}: ${TEXTCOLOR}${CMD}${NOCOLOR}"
             else
+                scp $SSH_OPT $CDB2_CONFIG $node:$CDB2_CONFIG
                 scp $SSH_OPT ${REP_ENV_VARS} $node:${REP_ENV_VARS}
                 # could also use connection sharing and close master ssh session in unsetup
                 ssh -n $SSH_OPT -tt $node ${CMD} &> $LOGDIR/${DBNAME}.${node}.db &

tests/testcase.mk

@@ -39,6 +39,7 @@ export DBDIR=$(TESTDIR)/$(DBNAME)
 export TMPDIR=$(TESTDIR)/tmp
 export CDB2_CONFIG=$(abspath $(DBDIR)/comdb2db.cfg)
 export CDB2_OPTIONS=--cdb2cfg $(CDB2_CONFIG)
+export CDB2_CONFIG_FILE=$(CDB2_CONFIG)
 export COMDB2_ROOT=$(TESTDIR)
 export COMDB2_UNITTEST?=0
 

tests/tools/keygen.sh

@@ -201,3 +201,14 @@ for crt in `find ${CADIR} -name 'server*.crt'`; do
              -keyfile ${CADIR}/root.key -cert ${CADIR}/root.crt
 done
 openssl ca -config ${CADIR}/ca.cnf -gencrl -out ${CADIR}/client.crl
+
+for node in $CLUSTER; do
+    if [ "$node" = "$myhostname" ] ; then
+      continue
+    fi
+    scp -o StrictHostKeyChecking=no $CADIR/client.crt $node:$CADIR/client.crt
+    scp -o StrictHostKeyChecking=no $CADIR/client.key $node:$CADIR/client.key
+    scp -o StrictHostKeyChecking=no $CADIR/root.crt $node:$CADIR/root.crt
+    scp -o StrictHostKeyChecking=no $CADIR/root.crl $node:$CADIR/root.crl
+done
+