Uploaded image for project: 'Ranger'
  1. Ranger
  2. RANGER-746

Ranger Admin: Add wildcard, multiple CN & SAN support when validating plugins' SSL certs

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • None
    • 0.6.0, 0.5.3
    • None
    • None

    Description

      Proposed Improvement
      When SSL is enabled, Ranger Admin validates plugins' certificates with "Common Name" specified in the repository config.

      Need to support below in Common Name for Certificate:
      – Allow wildcard
      – Allow multiple CN (comma separated list)
      – Allow SAN attribute (Subject Alternate Name)

      How to verify
      – Enable SSL for ranger admin
      – Add these attributes to plugins' SSL cert
      – Specify them in "Common Name" field of repo config within Ranger UI
      – Confirm plugin is able to communicate to Ranger Admin in SSL

      Attachments

        1. 0001-RANGER-746-Addressing-suggestions-from-Review-Add-wi.patch
          9 kB
          Velmurugan Periasamy
        2. 0001-RANGER-746-Add-wildcard-multiple-CN-SAN-support-when.patch
          8 kB
          Velmurugan Periasamy
        3. 0001-RANGER-746-V3.patch
          10 kB
          Velmurugan Periasamy

        Issue Links

          Activity

            People

              vel Velmurugan Periasamy
              vel Velmurugan Periasamy
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: