Uploaded image for project: 'Ranger'
  1. Ranger
  2. RANGER-746

Ranger Admin: Add wildcard, multiple CN & SAN support when validating plugins' SSL certs

    XMLWordPrintableJSON

    Details

    • Type: Improvement
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 0.6.0, 0.5.3
    • Component/s: None
    • Labels:
      None

      Description

      Proposed Improvement
      When SSL is enabled, Ranger Admin validates plugins' certificates with "Common Name" specified in the repository config.

      Need to support below in Common Name for Certificate:
      – Allow wildcard
      – Allow multiple CN (comma separated list)
      – Allow SAN attribute (Subject Alternate Name)

      How to verify
      – Enable SSL for ranger admin
      – Add these attributes to plugins' SSL cert
      – Specify them in "Common Name" field of repo config within Ranger UI
      – Confirm plugin is able to communicate to Ranger Admin in SSL

        Attachments

        1. 0001-RANGER-746-Addressing-suggestions-from-Review-Add-wi.patch
          9 kB
          Velmurugan Periasamy
        2. 0001-RANGER-746-Add-wildcard-multiple-CN-SAN-support-when.patch
          8 kB
          Velmurugan Periasamy
        3. 0001-RANGER-746-V3.patch
          10 kB
          Velmurugan Periasamy

          Issue Links

            Activity

              People

              • Assignee:
                vel Velmurugan Periasamy
                Reporter:
                vel Velmurugan Periasamy
              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: