[GitHub] [pulsar] bmyers-csu opened a new issue #6640: Broker and Proxy support multiple CA certs

[GitBox <gi...@apache.org>]

bmyers-csu opened a new issue #6640: Broker and Proxy support multiple CA certs
URL: https://github.com/apache/pulsar/issues/6640
 
 
   I'm requesting the Broker and Proxy be updated to support multiple CA certs. I have a requirement that internal communication uses an internal CA cert and we allow customers to define their own CA cert alongside.
   

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services

[GitHub] [pulsar] wmccarley commented on issue #6640: Broker and Proxy support multiple CA certs

[GitBox <gi...@apache.org>]

wmccarley commented on issue #6640: Broker and Proxy support multiple CA certs
URL: https://github.com/apache/pulsar/issues/6640#issuecomment-614280100
 
 
   If you're talking about your brokers accepting multiple CAs in tlsTrustCertsFilePath I _think_ that is already supported. You should be able to cat all the ca pem files into one big file and use that as your trust cert store. I have not done it personally because we have no such requirement but I think it will work. You will get a pem file like this:
   `-----BEGIN CERTIFICATE-----`
   `<your CA>`
   `-----END CERTIFICATE-----`
   `-----BEGIN CERTIFICATE-----`
   `<their CA>`
   `-----END CERTIFICATE-----`

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services