[HDDS-1194] Ozone Security Phase -2

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Duplicate
• Component/s: Security
• Target Version/s: 1.4.0
• Assignee: István Fajth
• Reporter: Anu Engineer
• Created: 28/Feb/19 22:18
• Updated: 18/Oct/23 23:18
• Resolved: 18/Oct/23 23:18

Description

This is sub-task that tracks work items in the phase-2 of security work items.

Issue Links

• is duplicated by: HDDS-7331 Ozone PKI improvements
• is related to: HDDS-5840 Change the certificate/CRL permission to 600

Sub-Tasks

• Enable reset of keypair/certificate via heartbeat in DataNodes: Resolved
• Replace binary file required for kdc with script: Resolved
• Adding more DN permission info into the block token identifier: Resolved
• SCM CA: web portal to manual approve CSR: Resolved
• SCM CA: Handle CRL: Resolved
• SCM CA: Support Certificate with pathLenConstraint in BasicContraints Extension: Resolved
• Functionality to handle key rotation in SCM: Resolved
• Functionality to handle key rotation in OM: Resolved
• Functionality to handle key rotation in DN.: Resolved
• Support OM -reinitSecurity as needed for existing non-secure deployment: Resolved