Joseph Doherty
c185f621a4
- SEC-01: derive AuthenticationOptions.SqlitePath / TlsOptions.SelfSignedCertPath defaults from SpecialFolder.CommonApplicationData (was Windows-literal strings that became CWD-relative files off-Windows); validator rejects non-rooted overrides; delete the stray C:\ProgramData\...gateway-auth.db files that materialized under src/; add a tree-hygiene test failing on any *.db under src/. - SEC-04: GatewayOptionsValidator fails startup when IsProduction() && DisableLogin. - SEC-06: validator rejects LDAP Transport=None in Production; document the MxGateway__Ldap__ServiceAccountPassword env override + dev-credential rotation. Galaxy SnapshotCachePath rooting could not be validator-enforced (bound by the external GalaxyRepository package, not GatewayOptions) — documented instead. archreview: SEC-01/04/06 (P1). Verified on the Auth-0.1.4 baseline: Server build clean, GatewayOptionsValidator + GatewayTreeHygiene tests 53/53.
33 lines
1.5 KiB
C#
33 lines
1.5 KiB
C#
namespace ZB.MOM.WW.MxGateway.Server.Configuration;
|
|
|
|
/// <summary>
|
|
/// Options controlling the gateway's self-signed certificate auto-generation.
|
|
/// Only consulted when a Kestrel HTTPS endpoint is configured without its own
|
|
/// certificate; plaintext deployments never trigger generation.
|
|
/// </summary>
|
|
public sealed class TlsOptions
|
|
{
|
|
/// <summary>
|
|
/// Path to the persisted self-signed PFX. Reused across restarts. The default is derived
|
|
/// from <see cref="Environment.SpecialFolder.CommonApplicationData"/> (<c>C:\ProgramData</c>
|
|
/// on Windows, <c>/usr/share</c> or the container equivalent elsewhere) so a generated
|
|
/// private key never lands in the launch working directory on a non-Windows host. The
|
|
/// production hosts override this with an explicit path; the validator rejects a non-rooted
|
|
/// override.
|
|
/// </summary>
|
|
public string SelfSignedCertPath { get; init; } = Path.Combine(
|
|
Environment.GetFolderPath(Environment.SpecialFolder.CommonApplicationData),
|
|
"MxGateway",
|
|
"certs",
|
|
"gateway-selfsigned.pfx");
|
|
|
|
/// <summary>Lifetime in years of a freshly generated certificate.</summary>
|
|
public int ValidityYears { get; init; } = 10;
|
|
|
|
/// <summary>Extra DNS SANs to embed (e.g. a load-balancer name).</summary>
|
|
public IReadOnlyList<string> AdditionalDnsNames { get; init; } = [];
|
|
|
|
/// <summary>Regenerate the persisted certificate when it has expired.</summary>
|
|
public bool RegenerateIfExpired { get; init; } = true;
|
|
}
|