[SERVER-47479] Change common name of OCSP certificates to give more information Created: 10/Apr/20 Updated: 06/Dec/22 Resolved: 13/Apr/20 |
|
| Status: | Closed |
| Project: | Core Server |
| Component/s: | None |
| Affects Version/s: | None |
| Fix Version/s: | None |
| Type: | Task | Priority: | Major - P3 |
| Reporter: | Shreyas Kalyan | Assignee: | Backlog - Security Team |
| Resolution: | Duplicate | Votes: | 0 |
| Labels: | neweng | ||
| Remaining Estimate: | Not Specified | ||
| Time Spent: | Not Specified | ||
| Original Estimate: | Not Specified | ||
| Issue Links: |
|
||||||||
| Assigned Teams: |
Server Security
|
||||||||
| Participants: | |||||||||
| Description |
|
OCSP certificate common names are currently all localhost (except for the CA, which is Kernel Test CA). We should change the common name and regenerate the certificates so they are easier to find when converted to pfx and saved in the system trust stores. |