From d6a34b68d4667d4b99c1e76d63604a7bc1c9c3dd Mon Sep 17 00:00:00 2001 From: Karen Arutyunov Date: Thu, 25 May 2017 21:12:03 +0300 Subject: Add support for bbot agent authentication --- etc/brep-module.conf | 28 ++++++++++++++++++++++++++++ 1 file changed, 28 insertions(+) (limited to 'etc') diff --git a/etc/brep-module.conf b/etc/brep-module.conf index 53678bb..6499d4b 100644 --- a/etc/brep-module.conf +++ b/etc/brep-module.conf @@ -76,6 +76,20 @@ menu About=?about # build-config +# Directory containing build bot agent public keys. If specified, then brep +# will perform agent authentication and will reject build results from +# unauthenticated ones. If not specified, then build results are accepted from +# all agents (which will be a security risk if the brep instance is publicly +# accessible). +# +# The directory is expected to contain one PEM-encoded public key per file with +# the .pem extension. All other files and subdirectories are ignored. The brep +# instance needs to be restarted after adding new key files for the changes to +# take effect. +# +# build-bot-agent-keys + + # Number of packages build configurations per page. # # build-configurations 10 @@ -144,6 +158,20 @@ menu About=?about # build-db-retry 10 +# The openssl program to be used for crypto operations. You can also specify +# additional options that should be passed to the openssl program with +# openssl-option. If the openssl program is not explicitly specified, then brep +# will use openssl by default. +# +# openssl openssl + + +# Additional option to be passed to the openssl program (see openssl for +# details). Repeat this option to specify multiple openssl options. +# +# openssl-option + + # Trace verbosity. Disabled by default. # # verbosity 0 -- cgit v1.1