[
https://issues.apache.org/jira/browse/HBASE-30387?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18130525#comment-18130525
]
Hudson commented on HBASE-30387:
--------------------------------
Results for branch master
[build #1515 on
builds.a.o|https://ci-hbase.apache.org/job/HBase%20Nightly/job/master/1515/]:
(x) *{color:red}-1 overall{color}*
----
details (if available):
(/) {color:green}+1 general checks{color}
-- For more information [see general
report|https://ci-hbase.apache.org/job/HBase%20Nightly/job/master/1515/General_20Nightly_20Build_20Report/]
(x) {color:red}-1 jdk17 hadoop3 checks{color}
-- For more information [see jdk17
report|https://ci-hbase.apache.org/job/HBase%20Nightly/job/master/1515/JDK17_20Nightly_20Build_20Report_20_28Hadoop3_29/]
(/) {color:green}+1 jdk21 hadoop3 checks{color}
-- For more information [see jdk21
report|https://ci-hbase.apache.org/job/HBase%20Nightly/job/master/1515/JDK21_20Nightly_20Build_20Report_20_28Hadoop3_29/]
> Support SingleEKU certificates
> ------------------------------
>
> Key: HBASE-30387
> URL: https://issues.apache.org/jira/browse/HBASE-30387
> Project: HBase
> Issue Type: Improvement
> Components: security
> Reporter: Luca Kovacs
> Assignee: Luca Kovacs
> Priority: Major
> Labels: pull-request-available
>
> h2. Motivation
> HBase currently only supports dual-purpose certificates. These certificate
> carry both the serverAuth and clientAuth Extended Key Usages (EKUs), meaning
> the same key and certificate is used whether the service running on the host
> is acting as a TLS server or as a client in a mutual-TLS (mTLS) handshake.
> Industry standards and public CA-s (like DigiCert) are sunsetting multi-use
> certificates, making the current requirement for dual serverAuth and
> clientAuth EKUs difficult to manage.
> h2. Goal
> Allow configuring a separate client keystore and server truststore so that
> single-EKU certificates work out of the box, while maintaining full backward
> compatibility when only the existing properties are set.
--
This message was sent by Atlassian Jira
(v10.3.26#10030026)
