saltstack/salt — Issue #376: Verify master pub key
Author: iamb
Created: 2011-12-21 01:25:58+00:00
State: open

Currently, minions will always accept a master pubkey at first connect (provided it verifies the master has the correct private). I'd like to have at least configurably a mode where minion will not accept an unknown master.

Possibly a new minion config param "trust_mode" or so -- "open" (like open_mode True) "store" (same as now, default?) "strict" (key must be known). If both open_mode and trust_mode...take the more restrictive is probably The Right Thing

Motivation would be running a system in an untrusted network (something like amazon ec2). Getting master pub key in place would probably be outside the scope of salt though it would be possible to extend for minions something like what masters do to verify minion pubkeys...

- minion connects but doesn't know master
- wait, check for (local) acceptance of master key, wait, etc

Hopefully even re-use the 'retry' logic...haven't checked that yet

salt-key could be extended to "master" and "minion" modes for accepting master keys

I'm starting to work on this, comments, criticisms gladly taken