Uploaded image for project: 'Infrastructure'
  1. Infrastructure
  2. INFRA-1502

Insert new community update center root CA

    XMLWordPrintable

    Details

    • Similar Issues:

      Description

      The current UC root CA will expire in 2021. Since this key certificate is baked into jenkins.war, it needs a plenty of time to rotate. I think two years window would be sufficient, but since I looked, we might as well start now.

      This would be an opportunity to upgrade the key used to sign it. Currently, the key strength is RSA/2048.

      Beware of the export control restriction in JVM. I don't know if it's still in place, but if it is it places a limit to the key length we can use.

        Attachments

          Issue Links

            Activity

            kohsuke Kohsuke Kawaguchi created issue -
            kohsuke Kohsuke Kawaguchi made changes -
            Field Original Value New Value
            Link This issue relates to INFRA-368 [ INFRA-368 ]
            kohsuke Kohsuke Kawaguchi made changes -
            Link This issue relates to INFRA-974 [ INFRA-974 ]
            bitwiseman Liam Newman made changes -
            Link This issue is related to INFRA-1659 [ INFRA-1659 ]
            oleg_nenashev Oleg Nenashev made changes -
            Assignee Kohsuke Kawaguchi [ kohsuke ] Oleg Nenashev [ oleg_nenashev ]
            markewaite Mark Waite made changes -
            Assignee Oleg Nenashev [ oleg_nenashev ] Olivier Vernin [ olblak ]

              People

              Assignee:
              olblak Olivier Vernin
              Reporter:
              kohsuke Kohsuke Kawaguchi
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Dates

                Created:
                Updated: