Uploaded image for project: 'Kudu'
  1. Kudu
  2. KUDU-1920

Support "BYO PKI" for TLS

    XMLWordPrintableJSON

    Details

    • Type: New Feature
    • Status: Open
    • Priority: Minor
    • Resolution: Unresolved
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: security
    • Labels:
      None

      Description

      For Kudu 1.3 we implemented IPKI (internally-managed PKI bootstrapped off of Kerberos authentication). It may be useful at some point to also allow "bring-your-own PKI" in which the operators provide certificates for the servers and the CA, and clients authenticate using client certs.

      No immediate plans to work on this, but filing the JIRA so that we can collect feedback if people start to request this.

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              tlipcon Todd Lipcon
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated: