Hacktoberfest 2026: le issue che i maintainer hanno segnato per ottobre, aperte e adatte ai principianti. Sfoglia le issue Hacktoberfest

[feature:gsoc26] Detail real-life deployment use cases for X.509 Certificate Generator Templates

Aperta
  • Qualcosa non va?
#1,448 1 commento 0 reazioni 1 assegnatario Vedi su GitHub

I maintainer di solito rispondono entro 1 giorno

@stktyagi ci sta già lavorando.

Dal 30/7/2026.

Valutazione

Questa issue non è ancora stata valutata.

Descrizione

gsoc

Is your feature request related to a problem? Please describe.

Currently, OpenWISP restricts automated X.509 certificate generation exclusively to OpenVPN clients. This creates a significant architectural limitation for real-world deployments. If a network administrator wants to secure a local Web UI using HTTPS, set up 802.1x Wi-Fi enterprise authentication, or configure mTLS for local APIs, they are forced to attach an entirely unnecessary VPN configuration to the device just to generate the required certificates.

Describe the solution you'd like

#1378 implements support for general-purpose X.509 certificate generation that extends beyond OpenVPN usage. Highlighting real-life use cases will clarify why this decoupled architecture is necessary.

Key real-life use cases to document and support include:

  • Securing Local Web UIs: Automatically setting up a secure connection (HTTPS) so that when an administrator logs directly into a router or device's local configuration page, their passwords and data are encrypted and safe.
  • Enterprise Network Access: Making it much easier to set up high-security Wi-Fi networks, the kind typically used in corporate offices or universities where every individual device needs its own unique "digital ID card" to connect to the network.
  • Safe Machine-to-Machine Communication: Allowing devices and applications on the network to securely share data and talk to each other using strict digital IDs, without requiring the heavy processing power and complex setup of a full VPN tunnel.

Additional context

Documenting these specific scenarios (HTTPS, 802.1x, mTLS) will help contributors understand the necessity of decoupling certificate generation from the VPN module. It clarifies why we need fully functional lifecycle management to automatically generate, bind, revoke, and renew these standalone certificates.

Related Work

Related work is currently being tracked and maintained in the project's Kanban board.

Lingua principale
Python
Stelle
779
Fork
328
Merge medio
2g 19h
PR unite (30g)
7

Preparare l'ambiente

Come iniziare

  1. Leggi tutta la issue e poi la guida ai contributi del progetto.
  2. Commenta sulla issue per dire che te ne occupi tu — evita che due persone facciano lo stesso lavoro.
  3. Fai un fork del repository e lavora su un branch.
  4. Apri una pull request che faccia riferimento al numero della issue.

Altre issue di openwisp/openwisp-controller

Tutte le issue di openwisp/openwisp-controller

Issue simili

Altre issue su Python

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.