VPN key generation

STG Members: Shuvam, Hemant, Jignesh

Date: 25 May 2010

Conclusion:

  • Modify merce_user table, add two columns (i) has_vpnaccess 'Y/N', (ii) keyexpiry - to hold VPN key expiry date.
  • Modify Management UI to accept the value for above fields.
  • Modify user module to handle:
    • VPN key expiry. Auto-generate the VPN key after expiry.
    • Allow administrator to allow/deny user to connect using VPN. Do not delete the VPN keys if the user is denied acces using VPN.
    • Delete the VPN keys only when the user is deleted from Merce system.

  • Generate the VPN key when user is created. Check, instead of regenerating the keys when password changes, just change the pass-phrase used to access the key. If this is not supported then use empty pass-phrase.
  • Add link in UI to allow the user to download his/her keys.