cassandra
cassandra copied to clipboard
CASSANDRA-18951: Add option for MutualTlsAuthenticator to restrict the certificate age
In this commit, we introduce a new parameter option for the MutualTlsAuthenticator
. The new option is max_certificate_age
, and it can be configured as a duration configuration parameter as defined by the DurationSpec
(see CASSANDRA-15234). The resolution for this new property is minutes.
When specified, the certificate validation implementation will take that information and reject certificates that are older than the maximum allowed certificate age, translating into a rejection from the authenticating user.
patch by Francisco Guerrero; reviewed by TBD for CASSANDRA-18951