Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

• A pluggable CA service framework will be implemented that provides pluggable means to
initialize SSLContexts/SSLEngines in the management server. The plugins can implement their own trust
management to validate and verify incoming client request and security.
• A CA plugin can have its own specific settings, API etc.
• The pluggable CA service framework will enable a custom CA plugin to implement its own
background task service to monitor active agents/client list with expiring certificates, failing
authentication, send out alerts etc.
• Certificate lifecycle operations such as to create, renew, revoke, provision/propagate certificates
will be provided by the framework, however the mechanisms will be implemented by a CA
plugin.
• Two new CA plugins will be created:

...