You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@ozone.apache.org by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2023/07/05 18:30:00 UTC

[jira] [Updated] (HDDS-8592) Prepare DefaultCertificateClient for Root CA Rotation

     [ https://issues.apache.org/jira/browse/HDDS-8592?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

ASF GitHub Bot updated HDDS-8592:
---------------------------------
    Labels: pki pull-request-available  (was: pki)

> Prepare DefaultCertificateClient for Root CA Rotation
> -----------------------------------------------------
>
>                 Key: HDDS-8592
>                 URL: https://issues.apache.org/jira/browse/HDDS-8592
>             Project: Apache Ozone
>          Issue Type: Sub-task
>          Components: Security
>            Reporter: Szabolcs Gál
>            Assignee: Szabolcs Gál
>            Priority: Major
>              Labels: pki, pull-request-available
>
> There are a few steps needed before the final piece of root CA rotation can be fully implemented on client side.
> DefaultCertificateClient needs the CertificateLifeTime monitor to be updated to be able to run when root ca rotation is scheduled not just when regular certificate rotation is in progress.
> SignAndStoreCertificate currently is scattered across 3-4 different places, whereas a central location would fully suffice, and it also needs to be updated to use the new protocol to get the root CAs from the SCM.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For additional commands, e-mail: issues-help@ozone.apache.org