Siyao Meng created HDDS-17235:
---------------------------------
Summary: Accept only SCM certificates on SCM to SCM connections
Key: HDDS-17235
URL: https://issues.apache.org/jira/browse/HDDS-17235
Project: Apache Ozone
Issue Type: Improvement
Components: SCM HA
Reporter: Siyao Meng
Assignee: Siyao Meng
When {{hdds.grpc.tls.enabled}} is true, SCM Ratis and the inter-SCM gRPC
channel (used to download the SCM DB checkpoint) use the cluster trust manager.
That trust manager accepts any certificate issued by the cluster CA, including
Datanode, OM and Recon certificates, but only SCMs connect on these channels.
Wrap the trust manager for these channels so that, after the usual chain
validation, the peer certificate must be a CA certificate. SCM certificates are
CA certificates (the SCM sub-CA certificate, or the root CA certificate);
Datanode, OM and Recon certificates are not. Nothing changes when gRPC TLS is
off.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
