[
https://issues.apache.org/jira/browse/HDDS-589?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Xiaoyu Yao updated HDDS-589:
----------------------------
Description:
RFC 5280, section 4.2.1.9
A pathLenConstraint of zero indicates that no non-self-issued intermediate CA
certificates may follow in a valid certification path. Where it appears, the
pathLenConstraint field MUST be greater than or equal to zero. Where
pathLenConstraint does not appear, no limit is imposed.
This is needed when we support intermediate CA (non-genesis SCMs) issuing
certificate based on its certificate signed by genesis SCM.
> SCM CA: Support Certificate with pathLenConstraint in BasicContraints
> Extension
> -------------------------------------------------------------------------------
>
> Key: HDDS-589
> URL: https://issues.apache.org/jira/browse/HDDS-589
> Project: Hadoop Distributed Data Store
> Issue Type: Sub-task
> Components: Security
> Reporter: Xiaoyu Yao
> Priority: Major
>
> RFC 5280, section 4.2.1.9
> A pathLenConstraint of zero indicates that no non-self-issued intermediate CA
> certificates may follow in a valid certification path. Where it appears, the
> pathLenConstraint field MUST be greater than or equal to zero. Where
> pathLenConstraint does not appear, no limit is imposed.
> This is needed when we support intermediate CA (non-genesis SCMs) issuing
> certificate based on its certificate signed by genesis SCM.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: hdfs-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: hdfs-issues-h...@hadoop.apache.org
