xiaoyuyao commented on pull request #1468:
URL: https://github.com/apache/hadoop-ozone/pull/1468#issuecomment-706258012


   bq. Is it a backward compatible change? If I understood well both the old 
method and new method is good enough for validation, but the new version is 
more standard.
   
   Yes. The new version is the standard way to encode the keyUsage. 
   
   bq. There is a new DEROctetString(keyUsage) call in SelfSignedCertificate 
which is very similar to the one which is replaced in CertificateSigningRequest.
    There are 4 "new DEROctetString" but only two of them are for keyUsage. 
This PR is to fix the encoding of the keyUsage. I don't see find issue of using 
DEROctetString for for constraints and subject alternate names extension. 
   
   


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: ozone-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: ozone-issues-h...@hadoop.apache.org

Reply via email to