Uploaded image for project: 'Apache Ozone'
  1. Apache Ozone
  2. HDDS-8442

Inconsistent expiry time between root ca and all other certs

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • None
    • None
    • Security

    Description

      Ozone admin cert list command shows inconsistent expiry times between certificates. Root CA certs end with 23:59:59 and intermediate ca and regular certificates expire by 00:00:00. This should be consistent for all certificates.

      Here is an example log from a real cluster: (subject was removed from the logs: 

      ozone admin cert list -c100
      Total 26 valid certificates: 
SerialNumber      Valid From                     Expiry                                                                                                                              
1                 Wed Apr 05 00:00:00 UTC 2023   Sat Apr 08 23:59:59 UTC 2023   
6744449472298841  Wed Apr 05 00:00:00 UTC 2023   Sat Apr 08 00:00:00 UTC 2023   
6744467653703376  Wed Apr 05 00:00:00 UTC 2023   Fri Apr 07 00:00:00 UTC 2023   
6744469072819460  Wed Apr 05 00:00:00 UTC 2023   Fri Apr 07 00:00:00 UTC 2023   
6744469097402246  Wed Apr 05 00:00:00 UTC 2023   Fri Apr 07 00:00:00 UTC 2023   
6744469114981837  Wed Apr 05 00:00:00 UTC 2023   Fri Apr 07 00:00:00 UTC 2023   
6744469129693077  Wed Apr 05 00:00:00 UTC 2023   Fri Apr 07 00:00:00 UTC 2023   
6744469406807539  Wed Apr 05 00:00:00 UTC 2023   Fri Apr 07 00:00:00 UTC 2023   
6744470107865534  Wed Apr 05 00:00:00 UTC 2023   Fri Apr 07 00:00:00 UTC 2023   
6744470398467206  Wed Apr 05 00:00:00 UTC 2023   Fri Apr 07 00:00:00 UTC 2023   
6744472619416002  Wed Apr 05 00:00:00 UTC 2023   Fri Apr 07 00:00:00 UTC 2023   
6744472648403655  Wed Apr 05 00:00:00 UTC 2023   Sat Apr 08 00:00:00 UTC 2023   
6744473212107595  Wed Apr 05 00:00:00 UTC 2023   Sat Apr 08 00:00:00 UTC 2023   
6744473212999134  Wed Apr 05 00:00:00 UTC 2023   Fri Apr 07 00:00:00 UTC 2023   
6744473759697308  Wed Apr 05 00:00:00 UTC 2023   Fri Apr 07 00:00:00 UTC 2023   
6877970098702136  Fri Apr 07 00:00:00 UTC 2023   Sun Apr 09 00:00:00 UTC 2023   
6877970171225380  Fri Apr 07 00:00:00 UTC 2023   Sun Apr 09 00:00:00 UTC 2023   
6877970199060224  Fri Apr 07 00:00:00 UTC 2023   Sun Apr 09 00:00:00 UTC 2023   
6877970225934919  Fri Apr 07 00:00:00 UTC 2023   Sun Apr 09 00:00:00 UTC 2023   
6877971092330460  Fri Apr 07 00:00:00 UTC 2023   Sun Apr 09 00:00:00 UTC 2023   
6877972202116362  Fri Apr 07 00:00:00 UTC 2023   Sun Apr 09 00:00:00 UTC 2023   
6877975185260612  Fri Apr 07 00:00:00 UTC 2023   Sun Apr 09 00:00:00 UTC 2023   
6877976032273912  Fri Apr 07 00:00:00 UTC 2023   Sun Apr 09 00:00:00 UTC 2023   
6877976452897781  Fri Apr 07 00:00:00 UTC 2023   Sun Apr 09 00:00:00 UTC 2023   
6877976471681506  Fri Apr 07 00:00:00 UTC 2023   Sun Apr 09 00:00:00 UTC 2023   
6877979844665353  Fri Apr 07 00:00:00 UTC 2023   Sun Apr 09 00:00:00 UTC 2023   

      Attachments

        Activity

          People

            sgal Szabolcs Gál
            sgal Szabolcs Gál
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: