[
https://issues.apache.org/jira/browse/GEODE-8277?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Bill Burcham updated GEODE-8277:
--------------------------------
Description:
At least locator-maeve-keystore.jks is expired. This is causing CI failures now.
All the certs: the CA cert, and each of the three server certs are expired.
These need to all be regenerated using {{CertificateBuilder}} and friends.
I found neither instructions nor a script for regenerating these keystores and
truststores. They may be there but I didn't find 'em.
TODO:
# regenerate signing (CA) cert in truststore.jks
# create the three new keystores containing certs signed by the signing cert
# make sure all the expirations are at least 10 years hence
# make sure there is a README or better: a README and a script for generating
all that
# make sure all the SNI acceptance tests pass locally {{./gradlew
:geode-assembly:acceptanceTest --tests=org.apache.geode.client.sni.*}}
was:
At least locator-maeve-keystore.jks is expired. This is causing CI failures now.
All the certs: the CA cert, and each of the three server certs are expired.
These need to all be regenerated using {{CertificateBuilder}} and friends.
I found neither instructions nor a script for regenerating these keystores and
truststores. They may be there but I didn't find 'em.
> acceptance test certificates expired in Dockerized SNI acceptance tests
> -----------------------------------------------------------------------
>
> Key: GEODE-8277
> URL: https://issues.apache.org/jira/browse/GEODE-8277
> Project: Geode
> Issue Type: Bug
> Components: tests
> Reporter: Bill Burcham
> Assignee: Bruce J Schuchardt
> Priority: Major
>
> At least locator-maeve-keystore.jks is expired. This is causing CI failures
> now.
> All the certs: the CA cert, and each of the three server certs are expired.
> These need to all be regenerated using {{CertificateBuilder}} and friends.
> I found neither instructions nor a script for regenerating these keystores
> and truststores. They may be there but I didn't find 'em.
> TODO:
> # regenerate signing (CA) cert in truststore.jks
> # create the three new keystores containing certs signed by the signing cert
> # make sure all the expirations are at least 10 years hence
> # make sure there is a README or better: a README and a script for generating
> all that
> # make sure all the SNI acceptance tests pass locally {{./gradlew
> :geode-assembly:acceptanceTest --tests=org.apache.geode.client.sni.*}}
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
