Skip to content

HDDS-8151. Support fine grained lifetime for root CA certificate #4386

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
ChenSammi merged 4 commits into from
Mar 14, 2023
Merged

HDDS-8151. Support fine grained lifetime for root CA certificate #4386

ChenSammi merged 4 commits into from
Mar 14, 2023

Conversation

@ChenSammi
Copy link
Contributor

@ChenSammi ChenSammi commented Mar 13, 2023 •
edited
Loading

https://issues.apache.org/jira/browse/HDDS-8151

Test is covered by existing certificate related unit tests, here is one root CA certificate

         Version: 3
         SerialNumber: 1
             IssuerDN: CN=scm@SAMMICHEN-MB0,OU=51aaac84-e60b-4233-8cb7-876166cc34c4,O=c63adf50-d722-4493-b1ff-66a317e96ba2
           Start Date: Tue Mar 14 11:20:51 CST 2023
           Final Date: Fri Apr 21 11:20:51 CST 2028
            SubjectDN: CN=scm@SAMMICHEN-MB0,OU=51aaac84-e60b-4233-8cb7-876166cc34c4,O=c63adf50-d722-4493-b1ff-66a317e96ba2
           Public Key: RSA Public Key [eb:8b:b4:5d:57:b4:13:62:60:ef:82:7b:cb:51:1d:44:55:40:8f:07],[56:66:d1:a4]
        modulus: db5bc93fe8f718db78672fbe0270db4222d633eced858b42315bde9a5d5ab87a2c073fd5233d9130b42509300969d779e4898d45e8b31e0bd77cdb1085741a64c779e63e7205f42946060e8bfdabeec3cd88c1589ab8da14f4e43e5f46b4f981274688fd9d254bde6542d92631bad793b1c28248ee7536084939e5b185bf50545be8762bed8108a1b29df88436bd2d20adae939480c16bc02a5d8cb22fa150ac9174f977787ddbff4585378e0ba3b26f8b7a9b5b4073b7c2215b7ee5c41dbc4066731a7a0982b689cb9031b4f3f62510dadd1933570c4397494df7119df26d0516879a9df48e4a9c38a4b7d6865d0855ed6d75ebf0d18e57b72775aa552711ad
public exponent: 10001

  Signature Algorithm: SHA256WITHRSA
            Signature: 2599210df36caca2c7f07f4f250ab0f217e44720
                       6b8fdee50754ac008ab28704f4f361d9fd8374a7
                       d536c232a739801002c2b625a8f808131980cb22
                       60e1b1b4b85ff3d46f9bdb63ab0280ac69539e96
                       c25755adbdbe62fde21125622cb27d555428d768
                       ca8a8bd6e3fd7764d5895efd420cbcb6ff73a247
                       aa0a62d274e6e871a47a5152cd2cd4c2cd4b7ef5
                       2e0d6594651481fe15515f4fe2da76cc732d350e
                       599755cd884e307ec937ee47bd9bd03a9f9d1953
                       cb9c2d94cc526792951d1bd4194405e418f80856
                       529f660b149f68a9051a7d7bdc4db1c8cd062e03
                       416868776a689e02241938a30cec9dcea1a5f416
                       419b843cd3ec5556ae53cf16abb1055d
       Extensions: 
                       critical(true) BasicConstraints: isCa(true)
                       critical(true) KeyUsage: 0x6
                       critical(false) 2.5.29.17 value = Sequence
    Tagged [7] IMPLICIT 
        DER Octet String[4]

@kerneltime kerneltime requested a review from fapifta March 13, 2023 16:17
@kerneltime
Copy link
Contributor

kerneltime commented Mar 13, 2023

cc @SaketaChalamchala can you please take a look?

fapifta
fapifta approved these changes Mar 14, 2023
View reviewed changes
Copy link
Contributor

@fapifta fapifta left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@ChenSammi ChenSammi merged commit 5412984 into apache:master Mar 14, 2023
@ChenSammi
Copy link
Contributor Author

ChenSammi commented Mar 14, 2023

Thanks @fapifta .

errose28 added a commit to errose28/ozone that referenced this pull request Mar 16, 2023
@errose28
Merge branch 'master' into improve-upgrade-acc-tests
de7d66c 
* master: (262 commits)
  HDDS-8153. Integrate ContainerBalancer with MoveManager (apache#4391)
  HDDS-8090. When getBlock from a datanode fails, retry other datanodes. (apache#4357)
  HDDS-8163 Use try-with-resources to ensure close rockdb connection in SstFilteringService (apache#4402)
  HDDS-8065. Provide GNU long options (apache#4394)
  HDDS-7930. [addendum] input stream does not refresh expired block token.
  HDDS-7930. input stream does not refresh expired block token. (apache#4378)
  HDDS-7740. [Snapshot] Implement SnapshotDeletingService (apache#4244)
  HDDS-8076. Use container cache in Key listing API. (apache#4346)
  HDDS-8091. [addendum] Generate list of config tags from ConfigTag enum - Hadoop 3.1 compatibility fix (apache#4374)
  HDDS-8144. TestDefaultCertificateClient#testTimeBeforeExpiryGracePeriod fails as we approach DST. (apache#4382)
  HDDS-8151. Support fine grained lifetime for root CA certificate (apache#4386)
  HDDS-8150. RpcClientTest and ConfigurationSourceTest not run due to naming convention (apache#4388)
  HDDS-8131. Add Configuration for OM Ratis Log Purge Tuning Parameters. (apache#4371)
  HDDS-8133. Create ozone sh key checksum command (apache#4375)
  HDDS-8142. Check if no entries in Block DB for a container on container delete (apache#4379)
  HDDS-8118. Fail container delete on non empty chunks dir (apache#4367)
  HDDS-8028. JNI for RocksDB SST Dump tool (apache#4315)
  HDDS-8129. ContainerStateMachine allows two different tasks with the same container id running in parallel. (apache#4370)
  HDDS-8119. Remove loosely related AutoCloseable from SendContainerOutputStream (apache#4368)
  close db connection (apache#4366)
  ...
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@fapifta fapifta fapifta approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@ChenSammi @kerneltime @fapifta