Uploaded image for project: 'Infrastructure'
  1. Infrastructure
  2. INFRA-1502

Insert new community update center root CA


    • Similar Issues:


      The current UC root CA will expire in 2021. Since this key certificate is baked into jenkins.war, it needs a plenty of time to rotate. I think two years window would be sufficient, but since I looked, we might as well start now.

      This would be an opportunity to upgrade the key used to sign it. Currently, the key strength is RSA/2048.

      Beware of the export control restriction in JVM. I don't know if it's still in place, but if it is it places a limit to the key length we can use.


          Issue Links


            kohsuke Kohsuke Kawaguchi created issue -
            kohsuke Kohsuke Kawaguchi made changes -
            Field Original Value New Value
            Link This issue relates to INFRA-368 [ INFRA-368 ]
            kohsuke Kohsuke Kawaguchi made changes -
            Link This issue relates to INFRA-974 [ INFRA-974 ]
            bitwiseman Liam Newman made changes -
            Link This issue is related to INFRA-1659 [ INFRA-1659 ]
            oleg_nenashev Oleg Nenashev made changes -
            Assignee Kohsuke Kawaguchi [ kohsuke ] Oleg Nenashev [ oleg_nenashev ]


              • Assignee:
                oleg_nenashev Oleg Nenashev
                kohsuke Kohsuke Kawaguchi
              • Votes:
                0 Vote for this issue
                2 Start watching this issue


                • Created: