[PUP-7877] Future Work for Intermediate CA Improvements - Puppet Tickets

Details

CS Priority:
Major
CS Frequency:
2 - 5-25% of Customers
CS Severity:
3 - Serious
CS Business Value:
5 - $$$$$$
CS Impact:

Hide
Intermediate CAs are asked for by our largest users, as they are also very security conscious. While improvements were made to intermediate CAs in recent release they are still very difficult to setup and use and have some gaps as seen in the tickets within this epic.

Improvements to the Intermediate CA would both improve the security aspects and also be an enabler for desired multi-datacenter/federated installation desired by many large customers, especially in the APJ region.

Show
Intermediate CAs are asked for by our largest users, as they are also very security conscious. While improvements were made to intermediate CAs in recent release they are still very difficult to setup and use and have some gaps as seen in the tickets within this epic. Improvements to the Intermediate CA would both improve the security aspects and also be an enabler for desired multi-datacenter/federated installation desired by many large customers, especially in the APJ region.

Epic for Intermediate CA improvements that did not make the cut for initial iteration.

relates to

SERVER-1764 Improve Intermediate CA Support

SERVER-2019 ssl-util can only load pkcs #1 formated keys, not pkcs #8