[HDDS-7336] Improve PKI configurablity

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: Security
• Labels: configuration pki
• Assignee: István Fajth
• Reporter: István Fajth
• Created: 14/Oct/22 21:47
• Updated: 10/May/23 13:52

Description

Add missing configuration options:

• to add an externally generated root CA certificate and key material
• to specify the security leve of PKI to make Ozone conform with the security standards of the organization (used key type, key length, certificate lifetime random etc., this is exploratory we might add configurability for other stuff later on if there is a need.)

Issue Links

• blocks: HDDS-7331 Ozone PKI improvements

Sub-Tasks

• Enable to specify an external rootCA certificate to be used internally: Resolved
• Extend configurability of the internal PKI system: Open
• Allow DomainValidator to use local domains: Open