Szabolcs Gál created HDDS-8443:
----------------------------------
Summary: Intermediate CA expires 23:59:59 before Root CA
Key: HDDS-8443
URL: https://issues.apache.org/jira/browse/HDDS-8443
Project: Apache Ozone
Issue Type: Bug
Components: Security
Reporter: Szabolcs Gál
Using
{code:java}
ozone admin cert list
{code}
command, in the results it can be seen that sub ca expiration time is before
the root ca expiration time by 23:59:59. This issue might be resolved with
[HDDS-8442 Inconsistent expiry time between root ca and all other
certs|https://issues.apache.org/jira/browse/HDDS-8442]
Here is an example log for a real cluster:
{code:java}
Total 26 valid certificates:
SerialNumber Valid From Expiry
Subject
1 Wed Apr 05 00:00:00 UTC 2023 Sat Apr 08 23:59:59 UTC 2023
O=CID-6065618b-eeca-408b-8e96-5ae35ca33e68,
OU=d1a97ad7-1d92-49be-8fd7-0e7062b0cce6, CN=shost
6744449472298841 Wed Apr 05 00:00:00 UTC 2023 Sat Apr 08 00:00:00 UTC 2023
O=CID-6065618b-eeca-408b-8e96-5ae35ca33e68,
OU=d1a97ad7-1d92-49be-8fd7-0e7062b0cce6, CN=scm-host
6744467653703376 Wed Apr 05 00:00:00 UTC 2023 Fri Apr 07 00:00:00 UTC 2023
O=CID-6065618b-eeca-408b-8e96-5ae35ca33e68,
OU=d1a97ad7-1d92-49be-8fd7-0e7062b0cce6, CN=host
6744469072819460 Wed Apr 05 00:00:00 UTC 2023 Fri Apr 07 00:00:00 UTC 2023
O=CID-6065618b-eeca-408b-8e96-5ae35ca33e68,
OU=d1a97ad7-1d92-49be-8fd7-0e7062b0cce6, CN=host
6744469097402246 Wed Apr 05 00:00:00 UTC 2023 Fri Apr 07 00:00:00 UTC 2023
O=CID-6065618b-eeca-408b-8e96-5ae35ca33e68,
OU=d1a97ad7-1d92-49be-8fd7-0e7062b0cce6, CN=host
6744469114981837 Wed Apr 05 00:00:00 UTC 2023 Fri Apr 07 00:00:00 UTC 2023
O=CID-6065618b-eeca-408b-8e96-5ae35ca33e68,
OU=d1a97ad7-1d92-49be-8fd7-0e7062b0cce6, CN=host
6744469129693077 Wed Apr 05 00:00:00 UTC 2023 Fri Apr 07 00:00:00 UTC 2023
O=CID-6065618b-eeca-408b-8e96-5ae35ca33e68,
OU=d1a97ad7-1d92-49be-8fd7-0e7062b0cce6, CN=host
6744469406807539 Wed Apr 05 00:00:00 UTC 2023 Fri Apr 07 00:00:00 UTC 2023
O=CID-6065618b-eeca-408b-8e96-5ae35ca33e68,
OU=d1a97ad7-1d92-49be-8fd7-0e7062b0cce6, CN=host
6744470107865534 Wed Apr 05 00:00:00 UTC 2023 Fri Apr 07 00:00:00 UTC 2023
O=CID-6065618b-eeca-408b-8e96-5ae35ca33e68,
OU=d1a97ad7-1d92-49be-8fd7-0e7062b0cce6, CN=host
6744470398467206 Wed Apr 05 00:00:00 UTC 2023 Fri Apr 07 00:00:00 UTC 2023
O=CID-6065618b-eeca-408b-8e96-5ae35ca33e68,
OU=d1a97ad7-1d92-49be-8fd7-0e7062b0cce6, CN=host
6744472619416002 Wed Apr 05 00:00:00 UTC 2023 Fri Apr 07 00:00:00 UTC 2023
O=CID-6065618b-eeca-408b-8e96-5ae35ca33e68,
OU=d1a97ad7-1d92-49be-8fd7-0e7062b0cce6, CN=host
6744472648403655 Wed Apr 05 00:00:00 UTC 2023 Sat Apr 08 00:00:00 UTC 2023
O=CID-6065618b-eeca-408b-8e96-5ae35ca33e68,
OU=67eab1d9-4f99-41c9-a6ed-3696d79a24cb, CN=scm-host
6744473212107595 Wed Apr 05 00:00:00 UTC 2023 Sat Apr 08 00:00:00 UTC 2023
O=CID-6065618b-eeca-408b-8e96-5ae35ca33e68,
OU=a2b0a0c8-3535-43eb-9a6e-35352ac76dcc, CN=scm-host
6744473212999134 Wed Apr 05 00:00:00 UTC 2023 Fri Apr 07 00:00:00 UTC 2023
O=CID-6065618b-eeca-408b-8e96-5ae35ca33e68,
OU=d1a97ad7-1d92-49be-8fd7-0e7062b0cce6, CN=host
6744473759697308 Wed Apr 05 00:00:00 UTC 2023 Fri Apr 07 00:00:00 UTC 2023
O=CID-6065618b-eeca-408b-8e96-5ae35ca33e68,
OU=d1a97ad7-1d92-49be-8fd7-0e7062b0cce6, CN=host
6877970098702136 Fri Apr 07 00:00:00 UTC 2023 Sun Apr 09 00:00:00 UTC 2023
O=CID-6065618b-eeca-408b-8e96-5ae35ca33e68,
OU=d1a97ad7-1d92-49be-8fd7-0e7062b0cce6, CN=host
6877970171225380 Fri Apr 07 00:00:00 UTC 2023 Sun Apr 09 00:00:00 UTC 2023
O=CID-6065618b-eeca-408b-8e96-5ae35ca33e68,
OU=d1a97ad7-1d92-49be-8fd7-0e7062b0cce6, CN=host
6877970199060224 Fri Apr 07 00:00:00 UTC 2023 Sun Apr 09 00:00:00 UTC 2023
O=CID-6065618b-eeca-408b-8e96-5ae35ca33e68,
OU=d1a97ad7-1d92-49be-8fd7-0e7062b0cce6, CN=host
6877970225934919 Fri Apr 07 00:00:00 UTC 2023 Sun Apr 09 00:00:00 UTC 2023
O=CID-6065618b-eeca-408b-8e96-5ae35ca33e68,
OU=d1a97ad7-1d92-49be-8fd7-0e7062b0cce6, CN=host
6877971092330460 Fri Apr 07 00:00:00 UTC 2023 Sun Apr 09 00:00:00 UTC 2023
O=CID-6065618b-eeca-408b-8e96-5ae35ca33e68,
OU=d1a97ad7-1d92-49be-8fd7-0e7062b0cce6, CN=host
6877972202116362 Fri Apr 07 00:00:00 UTC 2023 Sun Apr 09 00:00:00 UTC 2023
O=CID-6065618b-eeca-408b-8e96-5ae35ca33e68,
OU=d1a97ad7-1d92-49be-8fd7-0e7062b0cce6, CN=host
6877975185260612 Fri Apr 07 00:00:00 UTC 2023 Sun Apr 09 00:00:00 UTC 2023
O=CID-6065618b-eeca-408b-8e96-5ae35ca33e68,
OU=d1a97ad7-1d92-49be-8fd7-0e7062b0cce6, CN=host
6877976032273912 Fri Apr 07 00:00:00 UTC 2023 Sun Apr 09 00:00:00 UTC 2023
O=CID-6065618b-eeca-408b-8e96-5ae35ca33e68,
OU=d1a97ad7-1d92-49be-8fd7-0e7062b0cce6, CN=host
6877976452897781 Fri Apr 07 00:00:00 UTC 2023 Sun Apr 09 00:00:00 UTC 2023
O=CID-6065618b-eeca-408b-8e96-5ae35ca33e68,
OU=d1a97ad7-1d92-49be-8fd7-0e7062b0cce6, CN=host
6877976471681506 Fri Apr 07 00:00:00 UTC 2023 Sun Apr 09 00:00:00 UTC 2023
O=CID-6065618b-eeca-408b-8e96-5ae35ca33e68,
OU=d1a97ad7-1d92-49be-8fd7-0e7062b0cce6, CN=host
6877979844665353 Fri Apr 07 00:00:00 UTC 2023 Sun Apr 09 00:00:00 UTC 2023
O=CID-6065618b-eeca-408b-8e96-5ae35ca33e68,
OU=d1a97ad7-1d92-49be-8fd7-0e7062b0cce6, CN=host {code}
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
