Opened 7 months ago

Closed 7 months ago

#2835 closed enhancement (done)

Check service identity using the certificate's DNS/SN instead of the certificate itself

Reported by: jkarder Owned by: jkarder
Priority: medium Milestone: HeuristicLab 3.3.15
Component: Hive.General Version: trunk
Keywords: Cc:

Description

Some endpoints are identified using a Base64-encoded certificate. When a new certificate is issued (i.e. renewed), this information has to be updated for every client. This is not necessary anymore when using DNS identities.

Change History (6)

comment:1 Changed 7 months ago by jkarder

  • Status changed from new to accepted

comment:2 Changed 7 months ago by jkarder

r15361:

  • switched to DNS identities
  • updated service client generation cmds

comment:3 Changed 7 months ago by jkarder

  • Owner changed from jkarder to abeham
  • Status changed from accepted to reviewing

comment:4 Changed 7 months ago by jkarder

  • Version changed from 3.3.14 to trunk

comment:5 Changed 7 months ago by abeham

  • Owner changed from abeham to jkarder
  • Status changed from reviewing to readytorelease

Reviewed changes: OK.

That was an onerous debugging session...

comment:6 Changed 7 months ago by jkarder

  • Resolution set to done
  • Status changed from readytorelease to closed

r15386: merged r15361 into stable

Indeed.

Note: See TracTickets for help on using tickets.