You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@ozone.apache.org by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2023/06/06 16:19:00 UTC

[jira] [Updated] (HDDS-8587) Prepare CertificateClient to store more than one rootCA certificate

     [ https://issues.apache.org/jira/browse/HDDS-8587?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

ASF GitHub Bot updated HDDS-8587:
---------------------------------
    Labels: pull-request-available  (was: )

> Prepare CertificateClient to store more than one rootCA certificate
> -------------------------------------------------------------------
>
>                 Key: HDDS-8587
>                 URL: https://issues.apache.org/jira/browse/HDDS-8587
>             Project: Apache Ozone
>          Issue Type: Sub-task
>          Components: Security
>            Reporter: Szabolcs Gál
>            Assignee: Szabolcs Gál
>            Priority: Major
>              Labels: pull-request-available
>
> For root CA cert rotation it's needed to temporarily store an old and a new root ca certificate because it might take some time to generate new certificates that use the new root CA as the trust anchor. The code around CertificateClient is not prepared to handle two root CA's yet, and it needs to be able to do so.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For additional commands, e-mail: issues-help@ozone.apache.org