[HDDS-8587] Prepare CertificateClient to store more than one rootCA certificate

• Type: Sub-task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.4.0
• Component/s: Security
• Labels: pull-request-available
• Assignee: Szabolcs Gál
• Reporter: Szabolcs Gál
• Created: 11/May/23 12:18
• Updated: 09/Jun/23 20:08
• Resolved: 06/Jun/23 16:19

Description

For root CA cert rotation it's needed to temporarily store an old and a new root ca certificate because it might take some time to generate new certificates that use the new root CA as the trust anchor. The code around CertificateClient is not prepared to handle two root CA's yet, and it needs to be able to do so.

Issue Links

• links to: GitHub Pull Request #4717
• links to: GitHub Pull Request #4852