This is an automated email from the ASF dual-hosted git repository.
sammichen pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/ozone.git
The following commit(s) were added to refs/heads/master by this push:
new 5412984766 HDDS-8151. Support fine grained lifetime for root CA
certificate (#4386)
5412984766 is described below
commit 5412984766e81543bf557fe035c33e43ebb1d057
Author: Sammi Chen <[email protected]>
AuthorDate: Tue Mar 14 16:52:01 2023 +0800
HDDS-8151. Support fine grained lifetime for root CA certificate (#4386)
---
.../hdds/security/x509/certificate/authority/DefaultCAServer.java | 5 +----
1 file changed, 1 insertion(+), 4 deletions(-)
diff --git
a/hadoop-hdds/framework/src/main/java/org/apache/hadoop/hdds/security/x509/certificate/authority/DefaultCAServer.java
b/hadoop-hdds/framework/src/main/java/org/apache/hadoop/hdds/security/x509/certificate/authority/DefaultCAServer.java
index a07d86412a..ddba9eb316 100644
---
a/hadoop-hdds/framework/src/main/java/org/apache/hadoop/hdds/security/x509/certificate/authority/DefaultCAServer.java
+++
b/hadoop-hdds/framework/src/main/java/org/apache/hadoop/hdds/security/x509/certificate/authority/DefaultCAServer.java
@@ -55,9 +55,7 @@ import java.security.cert.CertPath;
import java.security.cert.CertificateException;
import java.security.cert.X509Certificate;
import java.security.spec.InvalidKeySpecException;
-import java.time.LocalDate;
import java.time.LocalDateTime;
-import java.time.LocalTime;
import java.time.ZoneId;
import java.util.Date;
import java.util.List;
@@ -566,8 +564,7 @@ public class DefaultCAServer implements CertificateServer {
SecurityConfig securityConfig, KeyPair key)
throws IOException, SCMSecurityException {
Preconditions.checkNotNull(this.config);
- LocalDateTime beginDate =
- LocalDateTime.of(LocalDate.now(), LocalTime.MIDNIGHT);
+ LocalDateTime beginDate = LocalDateTime.now();
LocalDateTime endDate =
beginDate.plus(securityConfig.getMaxCertificateDuration());
SelfSignedCertificate.Builder builder = SelfSignedCertificate.newBuilder()
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
