[HDDS-11047] Unify the creation of Certificate Sign Requests in CertificateClient implementations

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 2.0.0
• Component/s: Security
• Assignee: István Fajth
• Reporter: István Fajth
• Created: 21/Jun/24 14:50
• Updated: 21/Jun/24 14:51

Description

Currently in the DefaultCertificateClient we are adding a few things to our CertificateSignRequest.Builder implementation, but some of the things like subject, and a few other properties are created pretty much the same way for all components but SCM.

This JIRA aims to unify the creation of CSRs for OM, DN, and Recon, and leave just the very specifics to the three related implementation, while let SCM specialize its CSR as needed. It may also be useful to explore if we can use the PKIProfiles to generate CSRs much more generically using them, if so, then the patch may contain that approach at the end.

Issue Links

• is related to: HDDS-10743 Turn the direct dependency on BouncyCastle to an optional one