Skip to content

Commit

Permalink
Feature/track tls node (#8416)
Browse files Browse the repository at this point in the history
* Added node_tls table

* Fixed syntax

* Insert in node_tls from radius_audit_log

* INSERT or UPDATE node_tls table if there is a radius EAP-TLS request

* Removed escaped string before insert in DB

* Match the unreg date of the node with the certificate provided

* Parse request to convert attributes format

* Typo

* Fixed sql upgrade script
  • Loading branch information
fdurand authored Dec 4, 2024
1 parent e162178 commit 5bc531e
Show file tree
Hide file tree
Showing 9 changed files with 283 additions and 107 deletions.
27 changes: 27 additions & 0 deletions db/pf-schema-X.Y.sql
Original file line number Diff line number Diff line change
Expand Up @@ -1619,6 +1619,33 @@ CREATE FUNCTION ROUND_TO_MONTH (d DATETIME)
RETURNS DATETIME DETERMINISTIC
RETURN DATE_ADD(DATE(d),interval -DAY(d)+1 DAY);


--
-- Create table node_tls
--

CREATE TABLE node_tls (
`mac` varchar(17) NOT NULL PRIMARY KEY,
`TLSCertSerial` varchar(255) default NULL,
`TLSCertExpiration` varchar(255) default NULL,
`TLSCertValidSince` varchar(255) default NULL,
`TLSCertSubject` varchar(255) default NULL,
`TLSCertIssuer` varchar(255) default NULL,
`TLSCertCommonName` varchar(255) default NULL,
`TLSCertSubjectAltNameEmail` varchar(255) default NULL,
`TLSClientCertSerial` varchar(255) default NULL,
`TLSClientCertExpiration` varchar(255) default NULL,
`TLSClientCertValidSince` varchar(255) default NULL,
`TLSClientCertSubject` varchar(255) default NULL,
`TLSClientCertIssuer` varchar(255) default NULL,
`TLSClientCertCommonName` varchar(255) default NULL,
`TLSClientCertSubjectAltNameEmail` varchar(255) default NULL,
`TLSClientCertX509v3ExtendedKeyUsage` varchar(255) default NULL,
`TLSClientCertX509v3SubjectKeyIdentifier` varchar(255) default NULL,
`TLSClientCertX509v3AuthorityKeyIdentifier` varchar(255) default NULL,
`TLSClientCertX509v3ExtendedKeyUsageOID` varchar(255) default NULL
) ENGINE=InnoDB DEFAULT CHARACTER SET = 'utf8mb4' COLLATE = 'utf8mb4_general_ci';

--
-- Updating to current version
--
Expand Down
24 changes: 24 additions & 0 deletions db/upgrade-X.X-X.Y.sql
Original file line number Diff line number Diff line change
Expand Up @@ -70,6 +70,30 @@ ALTER TABLE radius_audit_log MODIFY created_at TIMESTAMP NOT NULL DEFAULT CURREN
\! echo "Make psk unique";
ALTER TABLE person ADD CONSTRAINT UNIQUE person_psk (`psk`);

\! echo "Create table node_tls"

CREATE TABLE IF NOT EXISTS node_tls (
`mac` varchar(17) NOT NULL PRIMARY KEY,
`TLSCertSerial` varchar(255) default NULL,
`TLSCertExpiration` varchar(255) default NULL,
`TLSCertValidSince` varchar(255) default NULL,
`TLSCertSubject` varchar(255) default NULL,
`TLSCertIssuer` varchar(255) default NULL,
`TLSCertCommonName` varchar(255) default NULL,
`TLSCertSubjectAltNameEmail` varchar(255) default NULL,
`TLSClientCertSerial` varchar(255) default NULL,
`TLSClientCertExpiration` varchar(255) default NULL,
`TLSClientCertValidSince` varchar(255) default NULL,
`TLSClientCertSubject` varchar(255) default NULL,
`TLSClientCertIssuer` varchar(255) default NULL,
`TLSClientCertCommonName` varchar(255) default NULL,
`TLSClientCertSubjectAltNameEmail` varchar(255) default NULL,
`TLSClientCertX509v3ExtendedKeyUsage` varchar(255) default NULL,
`TLSClientCertX509v3SubjectKeyIdentifier` varchar(255) default NULL,
`TLSClientCertX509v3AuthorityKeyIdentifier` varchar(255) default NULL,
`TLSClientCertX509v3ExtendedKeyUsageOID` varchar(255) default NULL
) ENGINE=InnoDB DEFAULT CHARACTER SET = 'utf8mb4' COLLATE = 'utf8mb4_general_ci';

\! echo "Incrementing PacketFence schema version...";
INSERT IGNORE INTO pf_version (id, version, created_at) VALUES (@VERSION_INT, CONCAT_WS('.', @MAJOR_VERSION, @MINOR_VERSION), NOW());

Expand Down
Loading

0 comments on commit 5bc531e

Please sign in to comment.