Phoenix500526 opened a new issue, #12009:
URL: https://github.com/apache/arrow-rs/issues/12009

   ### Background
   
   `arrow-flight/examples/data/gen_certs.sh` generates certificates and private 
keys for the Flight TLS examples. During the review of #11497, we identified 
uncertainty about its provenance and licensing.
   
   The script cites a Rust forum post, but its distinctive `/C=FI/CN=vahid` 
argument and the same source comment also appear in a Stack Overflow answer. 
The current source comment does not establish the full provenance. See the 
[investigation in the PR 
discussion](https://github.com/apache/arrow-rs/pull/11497#discussion_r4369510541).
   
   In response, @sdf-jkl [suggested opening a follow-up issue to rewrite the 
script](https://github.com/apache/arrow-rs/pull/11497#discussion_r4426659324). 
This issue tracks that work separately from the RAT-to-HawkEye migration.
   
   ### Proposed change
   
   Independently implement the certificate generation script based on the 
requirements of the Flight TLS examples, with clear provenance and an ASF 
license header.
   
   Preserve the functionality needed by the examples: generate a root CA and 
signed client and server certificates, along with their private keys, and 
retain the filenames and certificate properties that the examples require, 
including support for `localhost`.
   
   ### Acceptance criteria
   
   - The replacement script has an ASF license header and instructions for 
running it.
   - The generated certificates and keys work with the existing Flight TLS 
examples.
   - The change documents how the generated files were validated.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to