You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@ozone.apache.org by "Sammi Chen (Jira)" <ji...@apache.org> on 2022/11/09 03:35:00 UTC

[jira] [Resolved] (HDDS-7453) Check certificate expiration at service startup, renew if necessary

     [ https://issues.apache.org/jira/browse/HDDS-7453?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Sammi Chen resolved HDDS-7453.
------------------------------
    Resolution: Fixed

> Check certificate expiration at service startup, renew if necessary
> -------------------------------------------------------------------
>
>                 Key: HDDS-7453
>                 URL: https://issues.apache.org/jira/browse/HDDS-7453
>             Project: Apache Ozone
>          Issue Type: Improvement
>          Components: Security
>            Reporter: István Fajth
>            Assignee: István Fajth
>            Priority: Blocker
>              Labels: pki, pull-request-available
>
> At service startup there is a possibility to ease the problem with the expiring internal SSL certificates.
> The idea here is to check the expiration date of the certificate during initialization, and remove the key and certificate material if the certificate is expired or is about to expire, then recreate and re-initialize the certificate client of the service, with that as there won't be certificate material there, it would re-create the keys and file a CSR to the SCM, and get a new certificate.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For additional commands, e-mail: issues-help@ozone.apache.org