Galsza opened a new pull request, #4934:
URL: https://github.com/apache/ozone/pull/4934

   ## What changes were proposed in this pull request?
   
   For root CA cert rotation the clients need to be able to get all root CAs 
from SCM. The messaging is implemented here, the clients getting the root CA 
will be implemented in a later patch. 
   
   This can't be done through the old protocol messages, because older clients 
save the pem encoded string directly into a file and they read it back 
generating a cert path. If this pem encoded message contained multiple root ca 
then it would cause problems when read back and trying to generate a cert path 
with multiple root CAs in them. Therefore a new communication protocol is 
needed. 
   
   ## What is the link to the Apache JIRA
   
   [HDDS-8590](https://issues.apache.org/jira/browse/HDDS-8590)
   
   ## How was this patch tested?
   
   Added a small unit test, CI run on my fork: (This is still in progress at 
the moment of opening this PR, but the previous workflow run was executed 
successfully and no untested changes were made after)
   https://github.com/Galsza/ozone/actions/runs/5313261796
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to