[
https://issues.apache.org/jira/browse/GEODE-8277?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17139513#comment-17139513
]
ASF GitHub Bot commented on GEODE-8277:
---------------------------------------
bschuchardt opened a new pull request #5274:
URL: https://github.com/apache/geode/pull/5274
The old keystores have expired. I've generated 100 year keystores and added
a
program to recreate them if necessary.
I've inspected the new jks files to verify that they expire in 2120 and have
run the SNI tests to ensure that they still work.
Thank you for submitting a contribution to Apache Geode.
In order to streamline the review of the contribution we ask you
to ensure the following steps have been taken:
### For all changes:
- [ ] Is there a JIRA ticket associated with this PR? Is it referenced in
the commit message?
- [ ] Has your PR been rebased against the latest commit within the target
branch (typically `develop`)?
- [ ] Is your initial contribution a single, squashed commit?
- [ ] Does `gradlew build` run cleanly?
- [ ] Have you written or updated unit tests to verify your changes?
- [ ] If adding new dependencies to the code, are these dependencies
licensed in a way that is compatible for inclusion under [ASF
2.0](http://www.apache.org/legal/resolved.html#category-a)?
### Note:
Please ensure that once the PR is submitted, check Concourse for build
issues and
submit an update to your PR as soon as possible. If you need help, please
send an
email to d...@geode.apache.org.
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org
> acceptance test certificates expired in Dockerized SNI acceptance tests
> -----------------------------------------------------------------------
>
> Key: GEODE-8277
> URL: https://issues.apache.org/jira/browse/GEODE-8277
> Project: Geode
> Issue Type: Bug
> Components: tests
> Reporter: Bill Burcham
> Assignee: Bruce J Schuchardt
> Priority: Major
>
> At least locator-maeve-keystore.jks is expired. This is causing CI failures
> now.
> All the certs: the CA cert, and each of the three server certs are expired.
> These need to all be regenerated using {{CertificateBuilder}} and friends.
> I found neither instructions nor a script for regenerating these keystores
> and truststores. They may be there but I didn't find 'em.
> TODO:
> # regenerate signing (CA) cert in truststore.jks
> # create the three new keystores containing certs signed by the signing cert
> # make sure all the expirations are at least 10 years hence
> # make sure there is a README or better: a README and a script for generating
> all that
> # make sure all the SNI acceptance tests pass locally {{./gradlew
> :geode-assembly:acceptanceTest --tests=org.apache.geode.client.sni.*}}
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
