[HDDS-8591] Create scheduler to check for new root ca certificates

• Type: Sub-task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.4.0
• Component/s: Security
• Labels: pki pull-request-available
• Assignee: Szabolcs Gál
• Reporter: Szabolcs Gál
• Created: 11/May/23 12:41
• Updated: 06/Jul/23 09:58
• Resolved: 06/Jul/23 09:58

Description

For rotating the root CA certificates we want clients to start polling at a certain time for the new root CA. This might happen at a predefined time, or on demand from a CLI tool.

The current implementation will use a primitive solution for this which just polls every 2 hours anyway for the new root ca's. Later on this can be refined, but the load on the scm this way won't be high anyway.

Issue Links

• links to: GitHub Pull Request #4961