[HDDS-8879] Cleanup SecurityConfig and related class initialization

• Type: Sub-task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.4.0
• Fix Version/s: 1.4.0
• Component/s: Security
• Labels: pull-request-available
• Assignee: István Fajth
• Reporter: István Fajth
• Created: 16/Jun/23 13:07
• Updated: 24/Nov/23 01:46
• Resolved: 22/Jun/23 08:41

Description

In the certificate related code, we use the OzoneConfiguration loaded and the SecurityConfig created from the OzoneConfiguration in conjunction with each other.

We should strive to have all the PKI related code to rely only on the SecurityConfig, this makes it easier to reason about what configuration options are affecting its behaviour, and helps to prevent a few misusage we already have in the code (where we do new SecurityConfig(new SecurityConfig(config).getConfiguration) like flows.

Issue Links

• links to: GitHub Pull Request #4921