You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@ozone.apache.org by "Szabolcs Gál (Jira)" <ji...@apache.org> on 2023/06/29 15:52:00 UTC

[jira] [Updated] (HDDS-8593) Add RootCARotationPoller to CertClient

     [ https://issues.apache.org/jira/browse/HDDS-8593?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Szabolcs Gál updated HDDS-8593:
-------------------------------
    Summary: Add RootCARotationPoller to CertClient  (was: Change certificate renewal logic to be able to renew the certificate of a service on demand)

> Add RootCARotationPoller to CertClient
> --------------------------------------
>
>                 Key: HDDS-8593
>                 URL: https://issues.apache.org/jira/browse/HDDS-8593
>             Project: Apache Ozone
>          Issue Type: Sub-task
>          Components: Security
>            Reporter: Szabolcs Gál
>            Priority: Major
>              Labels: pki, pull-request-available
>
> Once the clients received their root CA certificate and added it into their TrustManagers, a new certificate rotation process needs to be kicked off to get a signed certificate from the SCM. Code for this already exists and is invoked through CertificateLifeTimeMonitor, but it needs to be refactored to be called on demand when a new root CA is ready to be used.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For additional commands, e-mail: issues-help@ozone.apache.org