[jira] [Comment Edited] (RANGER-746) Ranger Admin: Add wildcard, multiple CN & SAN support when validating plugins' SSL certs

["Velmurugan Periasamy (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/RANGER-746?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15209355#comment-15209355 ] 

Velmurugan Periasamy edited comment on RANGER-746 at 3/23/16 10:50 PM:
-----------------------------------------------------------------------

[Patch V2|https://issues.apache.org/jira/secure/attachment/12795086/0001-RANGER-746-Addressing-suggestions-from-Review-Add-wi.patch] added addressing suggestions from review


was (Author: vperiasamy):
Patch V2 added addressing suggestions from review

> Ranger Admin: Add wildcard, multiple CN & SAN support when validating plugins' SSL certs
> ----------------------------------------------------------------------------------------
>
>                 Key: RANGER-746
>                 URL: https://issues.apache.org/jira/browse/RANGER-746
>             Project: Ranger
>          Issue Type: Improvement
>            Reporter: Velmurugan Periasamy
>            Assignee: Velmurugan Periasamy
>             Fix For: 0.6.0
>
>         Attachments: 0001-RANGER-746-Add-wildcard-multiple-CN-SAN-support-when.patch, 0001-RANGER-746-Addressing-suggestions-from-Review-Add-wi.patch
>
>
> *Proposed Improvement*
> When SSL is enabled, Ranger Admin validates plugins' certificates with "Common Name" specified in the repository config.
> Need to support below in Common Name for Certificate:
> -- Allow wildcard 
> -- Allow multiple CN (comma separated list)
> -- Allow SAN attribute (Subject Alternate Name)
> *How to verify*
> -- Enable SSL for ranger admin
> -- Add these attributes to plugins' SSL cert
> -- Specify them in "Common Name" field of repo config within Ranger UI
> -- Confirm plugin is able to communicate to Ranger Admin in SSL



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)