[RANGER-746] Ranger Admin: Add wildcard, multiple CN & SAN support when validating plugins' SSL certs

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 0.6.0, 0.5.3
• Assignee: Velmurugan Periasamy
• Reporter: Velmurugan Periasamy
• Created: 25/Nov/15 20:15
• Updated: 29/Apr/16 18:38
• Resolved: 24/Mar/16 03:02

Description

Proposed Improvement
When SSL is enabled, Ranger Admin validates plugins' certificates with "Common Name" specified in the repository config.

Need to support below in Common Name for Certificate:
– Allow wildcard
– Allow multiple CN (comma separated list)
– Allow SAN attribute (Subject Alternate Name)

How to verify
– Enable SSL for ranger admin
– Add these attributes to plugins' SSL cert
– Specify them in "Common Name" field of repo config within Ranger UI
– Confirm plugin is able to communicate to Ranger Admin in SSL

Issue Links

• links to: Review request link