[
https://issues.apache.org/jira/browse/HDDS-17235?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Siyao Meng updated HDDS-17235:
------------------------------
Target Version/s: 2.2.2, 2.1.3
> Accept only SCM certificates on SCM to SCM connections
> ------------------------------------------------------
>
> Key: HDDS-17235
> URL: https://issues.apache.org/jira/browse/HDDS-17235
> Project: Apache Ozone
> Issue Type: Improvement
> Components: SCM HA
> Reporter: Siyao Meng
> Assignee: Siyao Meng
> Priority: Major
> Fix For: 2.3.0
>
>
> When {{hdds.grpc.tls.enabled}} is true, SCM Ratis and the inter-SCM gRPC
> channel (used to download the SCM DB checkpoint) use the cluster trust
> manager. That trust manager accepts any certificate issued by the cluster CA,
> including Datanode, OM and Recon certificates, but only SCMs connect on these
> channels.
> Wrap the trust manager for these channels so that, after the usual chain
> validation, the peer certificate must be a CA certificate. SCM certificates
> are CA certificates (the SCM sub-CA certificate, or the root CA certificate);
> Datanode, OM and Recon certificates are not. Nothing changes when gRPC TLS is
> off.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
