[ 
https://issues.apache.org/jira/browse/GEODE-9542?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Wayne updated GEODE-9542:
-------------------------
    Description: 
When the ssl-require-authentication system property is set to true, we should 
validate the Redis client's certificate against the Java truststore to ensure 
that the client certificate is issued by a trusted Certificate Authority.

 

_Acceptance Criteria_

Client certificates issued by trusted Certificate Authorities are properly 
authenticated.  Client certificates issued by non-trusted Certificate 
Authorities are not authenticated.

Appropriate tests are developed to ensure this feature works as expected and 
does not regress.

 

  was:
When the ssl-require-authentication system property is set to true, we should 
validate the Redis client's certificate against the Java truststore to ensure 
that the client certificate is issued by a trusted Certificate Authority.

 

_Acceptance Criteria_

Client certificates issued by trusted Certificate Authorities are properly 
authenticated.  

 


> Enable SSL Client Certificate Authorization for Redis
> -----------------------------------------------------
>
>                 Key: GEODE-9542
>                 URL: https://issues.apache.org/jira/browse/GEODE-9542
>             Project: Geode
>          Issue Type: New Feature
>            Reporter: Wayne
>            Priority: Major
>
> When the ssl-require-authentication system property is set to true, we should 
> validate the Redis client's certificate against the Java truststore to ensure 
> that the client certificate is issued by a trusted Certificate Authority.
>  
> _Acceptance Criteria_
> Client certificates issued by trusted Certificate Authorities are properly 
> authenticated.  Client certificates issued by non-trusted Certificate 
> Authorities are not authenticated.
> Appropriate tests are developed to ensure this feature works as expected and 
> does not regress.
>  



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to