cassandra icon indicating copy to clipboard operation
cassandra copied to clipboard

CASSANDRA-18951: Add option for MutualTlsAuthenticator to restrict the certificate age

Open frankgh opened this issue 1 year ago • 0 comments

In this commit, we introduce a new parameter option for the MutualTlsAuthenticator. The new option is max_certificate_age, and it can be configured as a duration configuration parameter as defined by the DurationSpec (see CASSANDRA-15234). The resolution for this new property is minutes.

When specified, the certificate validation implementation will take that information and reject certificates that are older than the maximum allowed certificate age, translating into a rejection from the authenticating user.

patch by Francisco Guerrero; reviewed by TBD for CASSANDRA-18951

frankgh avatar Feb 15 '24 21:02 frankgh