[
https://issues.apache.org/jira/browse/TS-3538?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Dave Thompson updated TS-3538:
------------------------------
Attachment: diff-ts-3538
Attaching code diff. This code change to iocore/net/SSLUtils.cc will check
cert for use during valid date range, permission existence, and PEM format, and
output a descriptive log entry if something is funky. As is, code won't
terminate ats, though there is a place holder for later option.
> ATS Should perform validity checks on certificate prior to serving
> ------------------------------------------------------------------
>
> Key: TS-3538
> URL: https://issues.apache.org/jira/browse/TS-3538
> Project: Traffic Server
> Issue Type: Improvement
> Components: Configuration
> Reporter: Dave Thompson
> Assignee: Dave Thompson
> Fix For: 6.0.0
>
> Attachments: diff-ts-3538
>
>
> If ATS has an non-valid certificate listed in it's ssl configuration, it will
> still use it. Operator may not be aware of the issue until end user
> complains, and the message is propagated back.
> Suggest a date validation check on server certificate (notBefore, notAfter
> check), with an appropriate message in log file.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
