Cloudstack Source code
Go to file
Rohit Yadav 1f52cd4245 FR12: Have basic constraint in CA certificate (#52)
* FR12: Have basic constraint in CA certificate

- Refactors certificate generation to use V3
- Removes use of V1 based certificate generator
- Puts basic constraint and keyusage extentions in certificate generator
  when caCert is not provided, i.e. for building CA certificate
- For normal certificate generation, skips putting basic constraint
  instead puts authority key identifier (the ca cert)
- Fixes tests to use the V3 certificate generator

Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>

* FR12: backup and restore cpvm/ssvm keystore during reboot

This is backported from:
https://github.com/apache/cloudstack/pull/2278

Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2017-10-10 10:38:13 +05:30
agent FR12 (CLOUDSTACK-9993): Secure Agent Communications (#38) 2017-09-26 09:19:31 +05:30
agent-simulator/tomcatconf CLOUDSTACK-6445: Simulator enhancements 2014-04-18 16:44:21 +05:30
api FR12 (CLOUDSTACK-9993): Secure Agent Communications (#38) 2017-09-26 09:19:31 +05:30
awsapi cloudstack: set next version to 4.5.3-SNAPSHOT 2015-09-14 09:59:40 +05:30
awsapi-setup CLOUDSTACK-1444. Fixing cloudstack-aws-api-register to set ec2 api version to the latest. [Support for EC2 API version 2012-08-15] 2013-07-04 10:08:48 +05:30
build Updating pom.xml version numbers for release 4.5.2 2015-08-19 14:42:54 +05:30
client FR12 (CLOUDSTACK-9993): Secure Agent Communications (#38) 2017-09-26 09:19:31 +05:30
cloud-cli small fix to make this work with spaces in names 2012-09-22 13:43:57 +02:00
core FR12 (CLOUDSTACK-9993): Secure Agent Communications (#38) 2017-09-26 09:19:31 +05:30
debian FR12 (CLOUDSTACK-9993): Secure Agent Communications (#38) 2017-09-26 09:19:31 +05:30
deps remove unused directory 2014-07-01 14:36:00 -07:00
developer FR12 (CLOUDSTACK-9993): Secure Agent Communications (#38) 2017-09-26 09:19:31 +05:30
docs/.tx Removing docs from master 2013-10-08 15:25:05 -04:00
engine FR12 (CLOUDSTACK-9993): Secure Agent Communications (#38) 2017-09-26 09:19:31 +05:30
framework FR12 (CLOUDSTACK-9993): Secure Agent Communications (#38) 2017-09-26 09:19:31 +05:30
maven-standard cloudstack: set next version to 4.5.3-SNAPSHOT 2015-09-14 09:59:40 +05:30
packaging FR12 (CLOUDSTACK-9993): Secure Agent Communications (#38) 2017-09-26 09:19:31 +05:30
plugins FR12: Have basic constraint in CA certificate (#52) 2017-10-10 10:38:13 +05:30
python CLOUDSTACK-8443: Support CentOS 7 for 4.5 2015-09-13 15:30:20 +02:00
quickcloud cloudstack: set next version to 4.5.3-SNAPSHOT 2015-09-14 09:59:40 +05:30
scripts FR12 (CLOUDSTACK-9993): Secure Agent Communications (#38) 2017-09-26 09:19:31 +05:30
server FR12: Have basic constraint in CA certificate (#52) 2017-10-10 10:38:13 +05:30
services FR12 (CLOUDSTACK-9993): Secure Agent Communications (#38) 2017-09-26 09:19:31 +05:30
setup FR12 (CLOUDSTACK-9993): Secure Agent Communications (#38) 2017-09-26 09:19:31 +05:30
systemvm FR12: Have basic constraint in CA certificate (#52) 2017-10-10 10:38:13 +05:30
test FR12 (CLOUDSTACK-9993): Secure Agent Communications (#38) 2017-09-26 09:19:31 +05:30
tools FR12 (CLOUDSTACK-9993): Secure Agent Communications (#38) 2017-09-26 09:19:31 +05:30
ui FR12 (CLOUDSTACK-9993): Secure Agent Communications (#38) 2017-09-26 09:19:31 +05:30
usage cloudstack: set next version to 4.5.3-SNAPSHOT 2015-09-14 09:59:40 +05:30
utils FR12: Have basic constraint in CA certificate (#52) 2017-10-10 10:38:13 +05:30
vmware-base FR-17: KVM, Xen and VMware support + UI with Marvin test 2017-03-27 09:53:40 +05:30
.gitignore Update gitignores for some new eclipse generated files 2014-09-02 10:09:04 +02:00
.java-version java: add java 1.7 version for jenv 2017-08-06 18:41:10 +02:00
.travis.yml CLOUDSTACK-8429: optimizing travis to run configurable set of tests only after configurable runs 2015-05-06 08:49:16 +05:30
CHANGES.md update 4.5.0 bugfix list, add Update this file quick howto at the end using jira-changes.py 2015-03-08 11:51:33 -04:00
CONTRIBUTING.md Add CONTRIBUTING instructions 2015-04-03 10:18:57 +02:00
Dockerfile Fix dockerbuild because hardcoded filename for marvin 2016-01-20 12:54:03 +01:00
INSTALL.md Cleaning the README, INSTALL and CHANGES file 2014-09-17 15:12:37 +02:00
LICENSE Updating LICENSE AND NOTICE 2014-04-03 17:10:01 -04:00
LICENSE.header Add license check plugin to root pom. Disabled for the entire project, except for poms that override it (opendaylight, nvp) 2014-01-22 11:22:42 +01:00
NOTICE Update NOTICE to account for updated jQuery version 2014-08-26 13:13:29 -07:00
README.md Add CONTRIBUTING instructions 2015-04-03 10:18:57 +02:00
configure-info.in License header updates for misc files 2012-08-03 14:51:41 -04:00
pom.xml APPLE-333: Oobm plugin for nested-cloudstack environments 2017-04-19 16:58:38 +05:30
supervisord.conf Add Dockerfile for simulator 2015-03-04 12:00:32 +01:00
version-info.in No more ant_args 2012-09-03 14:13:50 +02:00

README.md

Apache CloudStack Build Status Coverity Scan Build Status

Apache CloudStack

Apache CloudStack is open source software designed to deploy and manage large networks of virtual machines, as a highly available, highly scalable Infrastructure as a Service (IaaS) cloud computing platform. CloudStack is used by a number of service providers to offer public cloud services, and by many companies to provide an on-premises (private) cloud offering, or as part of a hybrid cloud solution.

CloudStack is a turnkey solution that includes the entire "stack" of features most organizations want with an IaaS cloud: compute orchestration, Network-as-a-Service, user and account management, a full and open native API, resource accounting, and a first-class User Interface (UI).

CloudStack currently supports the most popular hypervisors: VMware vSphere, KVM, XenServer, XenProject and Hyper-V as well as LXC containers.

Users can manage their cloud with an easy to use Web interface, command line tools, and/or a full-featured query based API.

For more information on Apache CloudStack, please visit the website

Who Uses CloudStack?

  • There are more than 150 known organizations using Apache CloudStack (or a commercial distribution of CloudStack). Our users include many major service providers running CloudStack to offer public cloud services, product vendors who incorporate or integrate with CloudStack in their own products, organizations who have used CloudStack to build their own private clouds, and systems integrators that offer CloudStack related services.

  • See our case studies highlighting successful deployments of Apache CloudStack.

  • See the up-to-date list of current users.

  • If you are using CloudStack in your organization and your company is not listed above, please complete our brief adoption survey. We're happy to keep your company name anonymous if you require.

Getting Started

  • Download a released version
  • Build from source with the instructions in the INSTALL.md file.

Getting Source Repository

Apache CloudStack project uses Git. The official Git repository is at:

https://git-wip-us.apache.org/repos/asf/cloudstack.git

And a mirror is hosted on Github:

https://github.com/apache/cloudstack

The Github mirror is strictly read only and provides convenience to users and developers to explore the code and for the community to accept contributions via Github pull requests.

Getting Involved and Contributing

Interested in helping out with Apache CloudStack? Great! We welcome participation from anybody willing to work The Apache Way and make a contribution. Note that you do not have to be a developer in order to contribute to Apache CloudStack. We need folks to help with documentation, translation, promotion etc.See our contribution page.

If you're interested in learning more or participating in the Apache CloudStack project, the mailing lists are the best way to do that. While the project has several communications channels, the mailing lists are the most active and the official channels for making decisions about the project itself.

Mailing lists:

IRC, join us on irc.freenode.net on:

  • #cloudstack: General Apache CloudStack conversation and end user support
  • #cloudstack-dev: Development discussions

Report and/or check bugs on JIRA and check our developer page for contributing code.

News and Events

Reporting Security Vulnerabilities

If you've found an issue that you believe is a security vulnerability in a released version of CloudStack, please report it to security@cloudstack.apache.org with details about the vulnerability, how it might be exploited, and any additional information that might be useful.

For more details, please visit our security page

License

Licensed to the Apache Software Foundation (ASF) under one or more contributor license agreements. See the NOTICE file distributed with this work for additional information regarding copyright ownership. The ASF licenses this file to you under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.

Please see the LICENSE file included in the root directory of the source tree for extended license details.

Notice of Cryptographic Software

This distribution includes cryptographic software. The country in which you currently reside may have restrictions on the import, possession, use, and/or re-export to another country, of encryption software. BEFORE using any encryption software, please check your country's laws, regulations and policies concerning the import, possession, or use, and re-export of encryption software, to see if this is permitted. See http://www.wassenaar.org/ for more information.

The U.S. Government Department of Commerce, Bureau of Industry and Security (BIS), has classified this software as Export Commodity Control Number (ECCN) 5D002.C.1, which includes information security software using or performing cryptographic functions with asymmetric algorithms. The form and manner of this Apache Software Foundation distribution makes it eligible for export under the License Exception ENC Technology Software Unrestricted (TSU) exception (see the BIS Export Administration Regulations, Section 740.13) for both object code and source code.

The following provides more details on the included cryptographic software:

  • CloudStack makes use of JaSypt cryptographic libraries
  • CloudStack has a system requirement of MySQL, and uses native database encryption functionality.
  • CloudStack makes use of the Bouncy Castle general-purpose encryption library.
  • CloudStack can optionally interacts with and controls OpenSwan-based VPNs.
  • CloudStack has a dependency on Apache WSS4J as part of the AWSAPI implementation.
  • CloudStack has a dependency on and makes use of JSch - a java SSH2 implementation.