Ticket #1097 (new issue)

Opened 9 years ago

[S] Change trust root configuration for services from named file to directory based

Reported by: pjkersha Owned by: pjkersha
Priority: desirable Milestone: CMIP5 Security
Component: security Version:
Keywords: security, MyProxy, Trust root provisioning Cc:

Description

For ESG automated provisioning of trust roots is proposed (#1092). Trusted CA certificates can be downloaded from MyProxy services on a regular basis keeping services up to date with the correct trust roots. As the names and number of files are not known in advance it's better for services to accept a directory setting from which to pick CA certificate files rather than specifying individual files.

Change NDG Security services so that they can all be configured in this way.

Note: See TracTickets for help on using tickets.