[
https://issues.apache.org/jira/browse/HDDS-589?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Xiaoyu Yao updated HDDS-589:
----------------------------
Fix Version/s: (was: 0.4.0)
> SCM CA: Support Certificate with pathLenConstraint in BasicContraints
> Extension
> -------------------------------------------------------------------------------
>
> Key: HDDS-589
> URL: https://issues.apache.org/jira/browse/HDDS-589
> Project: Hadoop Distributed Data Store
> Issue Type: Sub-task
> Components: Security
> Reporter: Xiaoyu Yao
> Priority: Major
>
> RFC 5280, section 4.2.1.9
> A pathLenConstraint of zero indicates that no non-self-issued intermediate CA
> certificates may follow in a valid certification path. Where it appears, the
> pathLenConstraint field MUST be greater than or equal to zero. Where
> pathLenConstraint does not appear, no limit is imposed.
> This is needed when we support intermediate CA (non-genesis SCMs) issuing
> certificate based on its certificate signed by genesis SCM.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: hdfs-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: hdfs-issues-h...@hadoop.apache.org
