You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@trafficserver.apache.org by "Igor Galić (Created JIRA)" <ji...@apache.org> on 2011/11/04 03:43:32 UTC
[jira] [Created] (TS-1013) Allow ssl_multicert.config to support CA
chains per host
Allow ssl_multicert.config to support CA chains per host
--------------------------------------------------------
Key: TS-1013
URL: https://issues.apache.org/jira/browse/TS-1013
Project: Traffic Server
Issue Type: New Feature
Components: SSL
Affects Versions: 3.0.1, 3.1.1
Reporter: Igor Galić
Assignee: Igor Galić
Attachments: ssl_multi_ca.patch
Allow ssl_multicert.config to support CA chains per host, i.e.:
{noformat}
dst_ip=12.34.24.253 ssl_cert=foo.pem ssl_ca_name=fooCAs.pem ssl_key_name
{noformat}
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (TS-1013) Allow ssl_multicert.config to support CA
chains per host
Posted by "Igor Galić (Updated JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/TS-1013?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Igor Galić updated TS-1013:
---------------------------
Attachment: ssl_multi_ca_trunk.patch
This one is for trunk!
> Allow ssl_multicert.config to support CA chains per host
> --------------------------------------------------------
>
> Key: TS-1013
> URL: https://issues.apache.org/jira/browse/TS-1013
> Project: Traffic Server
> Issue Type: New Feature
> Components: SSL
> Affects Versions: 3.1.1, 3.0.1
> Reporter: Igor Galić
> Assignee: Igor Galić
> Labels: ssl
> Attachments: ssl_multi_ca.patch, ssl_multi_ca_trunk.patch
>
>
> Allow ssl_multicert.config to support CA chains per host, i.e.:
> {noformat}
> dst_ip=12.34.24.253 ssl_cert=foo.pem ssl_ca_name=fooCAs.pem ssl_key_name
> {noformat}
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (TS-1013) Allow ssl_multicert.config to support CA
chains per host
Posted by "Igor Galić (Updated JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/TS-1013?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Igor Galić updated TS-1013:
---------------------------
Attachment: (was: TS-1013+944.patch)
> Allow ssl_multicert.config to support CA chains per host
> --------------------------------------------------------
>
> Key: TS-1013
> URL: https://issues.apache.org/jira/browse/TS-1013
> Project: Traffic Server
> Issue Type: New Feature
> Components: SSL
> Affects Versions: 3.1.1, 3.0.1
> Reporter: Igor Galić
> Assignee: Igor Galić
> Labels: ssl
> Fix For: 3.1.1
>
> Attachments: TS-1013+944-3.0.x.patch, ssl_multi_ca.patch, ssl_multi_ca_trunk.patch
>
>
> Allow ssl_multicert.config to support CA chains per host, i.e.:
> {noformat}
> dst_ip=12.34.24.253 ssl_cert=foo.pem ssl_ca_name=fooCAs.pem ssl_key_name
> {noformat}
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (TS-1013) Allow ssl_multicert.config to support
CA chains per host
Posted by "Igor Galić (Commented JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/TS-1013?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13150536#comment-13150536 ]
Igor Galić commented on TS-1013:
--------------------------------
Great. I accidentally revoked the ASF the grant for this patch and now Jira won't let me set it - no matter how I try.
Wonder if this works: I hereby grant the ASF this patch, which I have already implicitly granted for trunk.
> Allow ssl_multicert.config to support CA chains per host
> --------------------------------------------------------
>
> Key: TS-1013
> URL: https://issues.apache.org/jira/browse/TS-1013
> Project: Traffic Server
> Issue Type: New Feature
> Components: SSL
> Affects Versions: 3.1.1, 3.0.1
> Reporter: Igor Galić
> Assignee: Igor Galić
> Labels: ssl
> Fix For: 3.1.1
>
> Attachments: TS-1013+944-3.0.x.patch, ssl_multi_ca.patch, ssl_multi_ca_trunk.patch
>
>
> Allow ssl_multicert.config to support CA chains per host, i.e.:
> {noformat}
> dst_ip=12.34.24.253 ssl_cert=foo.pem ssl_ca_name=fooCAs.pem ssl_key_name
> {noformat}
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (TS-1013) Allow ssl_multicert.config to support
CA chains per host
Posted by "bettydramit (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/TS-1013?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13147587#comment-13147587 ]
bettydramit commented on TS-1013:
---------------------------------
Does it support SNI???
> Allow ssl_multicert.config to support CA chains per host
> --------------------------------------------------------
>
> Key: TS-1013
> URL: https://issues.apache.org/jira/browse/TS-1013
> Project: Traffic Server
> Issue Type: New Feature
> Components: SSL
> Affects Versions: 3.1.1, 3.0.1
> Reporter: Igor Galić
> Assignee: Igor Galić
> Labels: ssl
> Attachments: ssl_multi_ca.patch, ssl_multi_ca_trunk.patch
>
>
> Allow ssl_multicert.config to support CA chains per host, i.e.:
> {noformat}
> dst_ip=12.34.24.253 ssl_cert=foo.pem ssl_ca_name=fooCAs.pem ssl_key_name
> {noformat}
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (TS-1013) Allow ssl_multicert.config to support CA
chains per host
Posted by "Igor Galić (Updated JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/TS-1013?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Igor Galić updated TS-1013:
---------------------------
Attachment: ssl_multi_ca.patch
This one is for 3.0.x
> Allow ssl_multicert.config to support CA chains per host
> --------------------------------------------------------
>
> Key: TS-1013
> URL: https://issues.apache.org/jira/browse/TS-1013
> Project: Traffic Server
> Issue Type: New Feature
> Components: SSL
> Affects Versions: 3.1.1, 3.0.1
> Reporter: Igor Galić
> Assignee: Igor Galić
> Labels: ssl
> Attachments: ssl_multi_ca.patch
>
>
> Allow ssl_multicert.config to support CA chains per host, i.e.:
> {noformat}
> dst_ip=12.34.24.253 ssl_cert=foo.pem ssl_ca_name=fooCAs.pem ssl_key_name
> {noformat}
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (TS-1013) Allow ssl_multicert.config to support
CA chains per host
Posted by "Igor Galić (Commented JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/TS-1013?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13148040#comment-13148040 ]
Igor Galić commented on TS-1013:
--------------------------------
No. SNI is a separate issue - but now that I've cleaned those code paths and got to know the code it's much easier to work on TS-462.
> Allow ssl_multicert.config to support CA chains per host
> --------------------------------------------------------
>
> Key: TS-1013
> URL: https://issues.apache.org/jira/browse/TS-1013
> Project: Traffic Server
> Issue Type: New Feature
> Components: SSL
> Affects Versions: 3.1.1, 3.0.1
> Reporter: Igor Galić
> Assignee: Igor Galić
> Labels: ssl
> Attachments: ssl_multi_ca.patch, ssl_multi_ca_trunk.patch
>
>
> Allow ssl_multicert.config to support CA chains per host, i.e.:
> {noformat}
> dst_ip=12.34.24.253 ssl_cert=foo.pem ssl_ca_name=fooCAs.pem ssl_key_name
> {noformat}
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (TS-1013) Allow ssl_multicert.config to support CA
chains per host
Posted by "Igor Galić (Updated JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/TS-1013?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Igor Galić updated TS-1013:
---------------------------
Attachment: TS-1013+944.patch
> Allow ssl_multicert.config to support CA chains per host
> --------------------------------------------------------
>
> Key: TS-1013
> URL: https://issues.apache.org/jira/browse/TS-1013
> Project: Traffic Server
> Issue Type: New Feature
> Components: SSL
> Affects Versions: 3.1.1, 3.0.1
> Reporter: Igor Galić
> Assignee: Igor Galić
> Labels: ssl
> Fix For: 3.1.1
>
> Attachments: TS-1013+944-3.0.x.patch, ssl_multi_ca.patch, ssl_multi_ca_trunk.patch
>
>
> Allow ssl_multicert.config to support CA chains per host, i.e.:
> {noformat}
> dst_ip=12.34.24.253 ssl_cert=foo.pem ssl_ca_name=fooCAs.pem ssl_key_name
> {noformat}
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Resolved] (TS-1013) Allow ssl_multicert.config to support
CA chains per host
Posted by "Igor Galić (Resolved JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/TS-1013?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Igor Galić resolved TS-1013.
----------------------------
Resolution: Fixed
> Allow ssl_multicert.config to support CA chains per host
> --------------------------------------------------------
>
> Key: TS-1013
> URL: https://issues.apache.org/jira/browse/TS-1013
> Project: Traffic Server
> Issue Type: New Feature
> Components: SSL
> Affects Versions: 3.1.1, 3.0.1
> Reporter: Igor Galić
> Assignee: Igor Galić
> Labels: ssl
> Fix For: 3.0.2, 3.1.1
>
> Attachments: TS-1013+944-3.0.x.patch, ssl_multi_ca.patch, ssl_multi_ca_trunk.patch
>
>
> Allow ssl_multicert.config to support CA chains per host, i.e.:
> {noformat}
> dst_ip=12.34.24.253 ssl_cert=foo.pem ssl_ca_name=fooCAs.pem ssl_key_name
> {noformat}
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (TS-1013) Allow ssl_multicert.config to support CA
chains per host
Posted by "Igor Galić (Updated JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/TS-1013?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Igor Galić updated TS-1013:
---------------------------
Backport to Version: (was: 3.0.2)
Fix Version/s: 3.0.2
> Allow ssl_multicert.config to support CA chains per host
> --------------------------------------------------------
>
> Key: TS-1013
> URL: https://issues.apache.org/jira/browse/TS-1013
> Project: Traffic Server
> Issue Type: New Feature
> Components: SSL
> Affects Versions: 3.1.1, 3.0.1
> Reporter: Igor Galić
> Assignee: Igor Galić
> Labels: ssl
> Fix For: 3.1.1, 3.0.2
>
> Attachments: TS-1013+944-3.0.x.patch, ssl_multi_ca.patch, ssl_multi_ca_trunk.patch
>
>
> Allow ssl_multicert.config to support CA chains per host, i.e.:
> {noformat}
> dst_ip=12.34.24.253 ssl_cert=foo.pem ssl_ca_name=fooCAs.pem ssl_key_name
> {noformat}
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Work started] (TS-1013) Allow ssl_multicert.config to
support CA chains per host
Posted by "Igor Galić (Work started JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/TS-1013?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Work on TS-1013 started by Igor Galić.
> Allow ssl_multicert.config to support CA chains per host
> --------------------------------------------------------
>
> Key: TS-1013
> URL: https://issues.apache.org/jira/browse/TS-1013
> Project: Traffic Server
> Issue Type: New Feature
> Components: SSL
> Affects Versions: 3.1.1, 3.0.1
> Reporter: Igor Galić
> Assignee: Igor Galić
> Labels: ssl
> Attachments: ssl_multi_ca.patch, ssl_multi_ca_trunk.patch
>
>
> Allow ssl_multicert.config to support CA chains per host, i.e.:
> {noformat}
> dst_ip=12.34.24.253 ssl_cert=foo.pem ssl_ca_name=fooCAs.pem ssl_key_name
> {noformat}
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (TS-1013) Allow ssl_multicert.config to support CA
chains per host
Posted by "Igor Galić (Updated JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/TS-1013?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Igor Galić updated TS-1013:
---------------------------
Attachment: TS-1013+944.patch
This patch is intended for 3.0.x and includes TS-1013 and it's dependency, TS-944.
> Allow ssl_multicert.config to support CA chains per host
> --------------------------------------------------------
>
> Key: TS-1013
> URL: https://issues.apache.org/jira/browse/TS-1013
> Project: Traffic Server
> Issue Type: New Feature
> Components: SSL
> Affects Versions: 3.1.1, 3.0.1
> Reporter: Igor Galić
> Assignee: Igor Galić
> Labels: ssl
> Fix For: 3.1.1
>
> Attachments: TS-1013+944.patch, ssl_multi_ca.patch, ssl_multi_ca_trunk.patch
>
>
> Allow ssl_multicert.config to support CA chains per host, i.e.:
> {noformat}
> dst_ip=12.34.24.253 ssl_cert=foo.pem ssl_ca_name=fooCAs.pem ssl_key_name
> {noformat}
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (TS-1013) Allow ssl_multicert.config to support CA
chains per host
Posted by "Igor Galić (Updated JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/TS-1013?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Igor Galić updated TS-1013:
---------------------------
Attachment: TS-1013+944-3.0.x.patch
> Allow ssl_multicert.config to support CA chains per host
> --------------------------------------------------------
>
> Key: TS-1013
> URL: https://issues.apache.org/jira/browse/TS-1013
> Project: Traffic Server
> Issue Type: New Feature
> Components: SSL
> Affects Versions: 3.1.1, 3.0.1
> Reporter: Igor Galić
> Assignee: Igor Galić
> Labels: ssl
> Fix For: 3.1.1
>
> Attachments: TS-1013+944-3.0.x.patch, ssl_multi_ca.patch, ssl_multi_ca_trunk.patch
>
>
> Allow ssl_multicert.config to support CA chains per host, i.e.:
> {noformat}
> dst_ip=12.34.24.253 ssl_cert=foo.pem ssl_ca_name=fooCAs.pem ssl_key_name
> {noformat}
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (TS-1013) Allow ssl_multicert.config to support CA
chains per host
Posted by "Igor Galić (Updated JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/TS-1013?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Igor Galić updated TS-1013:
---------------------------
Fix Version/s: 3.1.1
> Allow ssl_multicert.config to support CA chains per host
> --------------------------------------------------------
>
> Key: TS-1013
> URL: https://issues.apache.org/jira/browse/TS-1013
> Project: Traffic Server
> Issue Type: New Feature
> Components: SSL
> Affects Versions: 3.1.1, 3.0.1
> Reporter: Igor Galić
> Assignee: Igor Galić
> Labels: ssl
> Fix For: 3.1.1
>
> Attachments: TS-1013+944.patch, ssl_multi_ca.patch, ssl_multi_ca_trunk.patch
>
>
> Allow ssl_multicert.config to support CA chains per host, i.e.:
> {noformat}
> dst_ip=12.34.24.253 ssl_cert=foo.pem ssl_ca_name=fooCAs.pem ssl_key_name
> {noformat}
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira