Uploaded image for project: 'Apache Ozone'
  1. Apache Ozone
  2. HDDS-8443

Intermediate CA expires 23:59:59 before Root CA

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • None
    • None
    • Security

    Description

      Using

      ozone admin cert list

      command, in the results it can be seen that sub ca expiration time is before the root ca expiration time by 23:59:59. This issue might be resolved with HDDS-8442 Inconsistent expiry time between root ca and all other certs

      Here is an example log for a real cluster: (first and second certificate are a root ca and a sub ca)

      Total 26 valid certificates: 
SerialNumber      Valid From                     Expiry                         Subject                                                                                                       
1                 Wed Apr 05 00:00:00 UTC 2023   Sat Apr 08 23:59:59 UTC 2023   O=CID-6065618b-eeca-408b-8e96-5ae35ca33e68, OU=d1a97ad7-1d92-49be-8fd7-0e7062b0cce6, CN=shost
6744449472298841  Wed Apr 05 00:00:00 UTC 2023   Sat Apr 08 00:00:00 UTC 2023   O=CID-6065618b-eeca-408b-8e96-5ae35ca33e68, OU=d1a97ad7-1d92-49be-8fd7-0e7062b0cce6, CN=scm-host
6744467653703376  Wed Apr 05 00:00:00 UTC 2023   Fri Apr 07 00:00:00 UTC 2023   O=CID-6065618b-eeca-408b-8e96-5ae35ca33e68, OU=d1a97ad7-1d92-49be-8fd7-0e7062b0cce6, CN=host
6744469072819460  Wed Apr 05 00:00:00 UTC 2023   Fri Apr 07 00:00:00 UTC 2023   O=CID-6065618b-eeca-408b-8e96-5ae35ca33e68, OU=d1a97ad7-1d92-49be-8fd7-0e7062b0cce6, CN=host
6744469097402246  Wed Apr 05 00:00:00 UTC 2023   Fri Apr 07 00:00:00 UTC 2023   O=CID-6065618b-eeca-408b-8e96-5ae35ca33e68, OU=d1a97ad7-1d92-49be-8fd7-0e7062b0cce6, CN=host
6744469114981837  Wed Apr 05 00:00:00 UTC 2023   Fri Apr 07 00:00:00 UTC 2023   O=CID-6065618b-eeca-408b-8e96-5ae35ca33e68, OU=d1a97ad7-1d92-49be-8fd7-0e7062b0cce6, CN=host
6744469129693077  Wed Apr 05 00:00:00 UTC 2023   Fri Apr 07 00:00:00 UTC 2023   O=CID-6065618b-eeca-408b-8e96-5ae35ca33e68, OU=d1a97ad7-1d92-49be-8fd7-0e7062b0cce6, CN=host
6744469406807539  Wed Apr 05 00:00:00 UTC 2023   Fri Apr 07 00:00:00 UTC 2023   O=CID-6065618b-eeca-408b-8e96-5ae35ca33e68, OU=d1a97ad7-1d92-49be-8fd7-0e7062b0cce6, CN=host
6744470107865534  Wed Apr 05 00:00:00 UTC 2023   Fri Apr 07 00:00:00 UTC 2023   O=CID-6065618b-eeca-408b-8e96-5ae35ca33e68, OU=d1a97ad7-1d92-49be-8fd7-0e7062b0cce6, CN=host
6744470398467206  Wed Apr 05 00:00:00 UTC 2023   Fri Apr 07 00:00:00 UTC 2023   O=CID-6065618b-eeca-408b-8e96-5ae35ca33e68, OU=d1a97ad7-1d92-49be-8fd7-0e7062b0cce6, CN=host
6744472619416002  Wed Apr 05 00:00:00 UTC 2023   Fri Apr 07 00:00:00 UTC 2023   O=CID-6065618b-eeca-408b-8e96-5ae35ca33e68, OU=d1a97ad7-1d92-49be-8fd7-0e7062b0cce6, CN=host
6744472648403655  Wed Apr 05 00:00:00 UTC 2023   Sat Apr 08 00:00:00 UTC 2023   O=CID-6065618b-eeca-408b-8e96-5ae35ca33e68, OU=67eab1d9-4f99-41c9-a6ed-3696d79a24cb, CN=scm-host
6744473212107595  Wed Apr 05 00:00:00 UTC 2023   Sat Apr 08 00:00:00 UTC 2023   O=CID-6065618b-eeca-408b-8e96-5ae35ca33e68, OU=a2b0a0c8-3535-43eb-9a6e-35352ac76dcc, CN=scm-host
6744473212999134  Wed Apr 05 00:00:00 UTC 2023   Fri Apr 07 00:00:00 UTC 2023   O=CID-6065618b-eeca-408b-8e96-5ae35ca33e68, OU=d1a97ad7-1d92-49be-8fd7-0e7062b0cce6, CN=host
6744473759697308  Wed Apr 05 00:00:00 UTC 2023   Fri Apr 07 00:00:00 UTC 2023   O=CID-6065618b-eeca-408b-8e96-5ae35ca33e68, OU=d1a97ad7-1d92-49be-8fd7-0e7062b0cce6, CN=host
6877970098702136  Fri Apr 07 00:00:00 UTC 2023   Sun Apr 09 00:00:00 UTC 2023   O=CID-6065618b-eeca-408b-8e96-5ae35ca33e68, OU=d1a97ad7-1d92-49be-8fd7-0e7062b0cce6, CN=host
6877970171225380  Fri Apr 07 00:00:00 UTC 2023   Sun Apr 09 00:00:00 UTC 2023   O=CID-6065618b-eeca-408b-8e96-5ae35ca33e68, OU=d1a97ad7-1d92-49be-8fd7-0e7062b0cce6, CN=host
6877970199060224  Fri Apr 07 00:00:00 UTC 2023   Sun Apr 09 00:00:00 UTC 2023   O=CID-6065618b-eeca-408b-8e96-5ae35ca33e68, OU=d1a97ad7-1d92-49be-8fd7-0e7062b0cce6, CN=host
6877970225934919  Fri Apr 07 00:00:00 UTC 2023   Sun Apr 09 00:00:00 UTC 2023   O=CID-6065618b-eeca-408b-8e96-5ae35ca33e68, OU=d1a97ad7-1d92-49be-8fd7-0e7062b0cce6, CN=host
6877971092330460  Fri Apr 07 00:00:00 UTC 2023   Sun Apr 09 00:00:00 UTC 2023   O=CID-6065618b-eeca-408b-8e96-5ae35ca33e68, OU=d1a97ad7-1d92-49be-8fd7-0e7062b0cce6, CN=host
6877972202116362  Fri Apr 07 00:00:00 UTC 2023   Sun Apr 09 00:00:00 UTC 2023   O=CID-6065618b-eeca-408b-8e96-5ae35ca33e68, OU=d1a97ad7-1d92-49be-8fd7-0e7062b0cce6, CN=host
6877975185260612  Fri Apr 07 00:00:00 UTC 2023   Sun Apr 09 00:00:00 UTC 2023   O=CID-6065618b-eeca-408b-8e96-5ae35ca33e68, OU=d1a97ad7-1d92-49be-8fd7-0e7062b0cce6, CN=host
6877976032273912  Fri Apr 07 00:00:00 UTC 2023   Sun Apr 09 00:00:00 UTC 2023   O=CID-6065618b-eeca-408b-8e96-5ae35ca33e68, OU=d1a97ad7-1d92-49be-8fd7-0e7062b0cce6, CN=host
6877976452897781  Fri Apr 07 00:00:00 UTC 2023   Sun Apr 09 00:00:00 UTC 2023   O=CID-6065618b-eeca-408b-8e96-5ae35ca33e68, OU=d1a97ad7-1d92-49be-8fd7-0e7062b0cce6, CN=host
6877976471681506  Fri Apr 07 00:00:00 UTC 2023   Sun Apr 09 00:00:00 UTC 2023   O=CID-6065618b-eeca-408b-8e96-5ae35ca33e68, OU=d1a97ad7-1d92-49be-8fd7-0e7062b0cce6, CN=host
6877979844665353  Fri Apr 07 00:00:00 UTC 2023   Sun Apr 09 00:00:00 UTC 2023   O=CID-6065618b-eeca-408b-8e96-5ae35ca33e68, OU=d1a97ad7-1d92-49be-8fd7-0e7062b0cce6, CN=host

      Attachments

        Activity

          People

            pifta István Fajth
            sgal Szabolcs Gál
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: