István Fajth created HDDS-9895:
----------------------------------

             Summary: Allow DomainValidator to use local domains
                 Key: HDDS-9895
                 URL: https://issues.apache.org/jira/browse/HDDS-9895
             Project: Apache Ozone
          Issue Type: Sub-task
    Affects Versions: 1.4.0
            Reporter: István Fajth


Currently Ozone's PKI system uses domain validation logic based on Apache 
Commons' DomainValidator, and it is configured to do not allow local domains.

We should add a configuration option that allows local domains in the check, so 
that top level domains like .localhost and .localdomain can be allowed.

Further research is needed to decide whether .local can be enabled or not. It 
is not listed in the local domains of DomanValidator, however it is something 
that is used in some cases.
Consider [.local's Wikipedia article|https://en.wikipedia.org/wiki/.local] and 
the linked documents about the decision.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to