You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@kudu.apache.org by "Todd Lipcon (JIRA)" <ji...@apache.org> on 2017/03/09 22:55:37 UTC

[jira] [Created] (KUDU-1920) Support "BYO PKI" for TLS

Todd Lipcon created KUDU-1920:
---------------------------------

             Summary: Support "BYO PKI" for TLS
                 Key: KUDU-1920
                 URL: https://issues.apache.org/jira/browse/KUDU-1920
             Project: Kudu
          Issue Type: New Feature
          Components: security
            Reporter: Todd Lipcon
            Priority: Minor


For Kudu 1.3 we implemented IPKI (internally-managed PKI bootstrapped off of Kerberos authentication). It may be useful at some point to also allow "bring-your-own PKI" in which the operators provide certificates for the servers and the CA, and clients authenticate using client certs.

No immediate plans to work on this, but filing the JIRA so that we can collect feedback if people start to request this.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)