Uploaded image for project: 'Apache Ozone'
  1. Apache Ozone
  2. HDDS-7938 Remove primordial SCM dependency during SCM decommission
  3. HDDS-8178

CertificateClient and KeyStoresFactory support multiple Sub-CA certificates in the trust chain

    XMLWordPrintableJSON

Details

    • Sub-task
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • None
    • 1.4.0
    • None

    Description

      Here is the previous certificate Hierarchy,

          Root CA Certificate

         /                                  \

      Sub-CA Certificate     Sub-CA Certificate

      /                           \

      DN1 Cert             DN2 Cert

       

      Following is the new certificate hierarchy,

       

          Root CA Certificate

         /                                  \

      Sub-CA Certificate     Sub-CA Certificate

      /                           \

      DN1 Cert             Sub-CA Certificate

                                     /                 \

                             DN2 Cert         DN3 Cert

       

      We need to refactor CertificateClient implementation to support multiple Sub-CA Certificate in the trust chain.

      Attachments

        Issue Links

          Activity

            People

              Sammi Sammi Chen
              Sammi Sammi Chen
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: