Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support for multiple trust stores #41

Open
6 tasks
nilmerg opened this issue Mar 29, 2019 · 1 comment
Open
6 tasks

Support for multiple trust stores #41

nilmerg opened this issue Mar 29, 2019 · 1 comment
Labels
enhancement New feature or improvement needs-sponsoring Not low on priority but also not scheduled soon without any incentive

Comments

@nilmerg
Copy link
Member

nilmerg commented Mar 29, 2019

At the moment only a single trust store is supported. This is sufficient for basic environments relying only on globally trusted certificate authorities. Though, once custom certificate authorities come into play (e.g. for company intranets) it may be required to differentiate between multiple trust stores.

This will also affect the current Certificate Overview view. In its current form it lacks utility in many ways. It lists any registered certificate no matter if it's an owner's certificate, an intermediate one or root certificate. This for example may cause that the most part of all certificates are non-owner ones. (e.g. > 80%)

Clicking on a certificate does only reveal it's properties and origin. There's neither a connection to which hosts are utilizing said certificate nor any information about which chain(s) it is part of. These associations may also be good candidates to be graphically visualized.

In order to overcome these disadvantages:

  • Drop the Certificate Overview view
  • Introduce a trust store management view with CRUD capabilities
  • Provide a detail view for trust stores with involved CAs and owner certificates
  • Provide a detail view for CA certificates showing details about associated owner certificates and possibly intermediate ones (involved chains) as well as the usual details
  • Provide a detail view for owner certificates showing involved hosts, its chain(s) and pretty graphs as well as the usual details
  • ...
@nilmerg nilmerg added enhancement New feature or improvement help wanted Contributions are welcome labels Mar 29, 2019
@Gninieb
Copy link

Gninieb commented May 9, 2019

  • Maybe add scantime to the list to get historical data

@nilmerg nilmerg added needs-sponsoring Not low on priority but also not scheduled soon without any incentive and removed help wanted Contributions are welcome labels May 10, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or improvement needs-sponsoring Not low on priority but also not scheduled soon without any incentive
Projects
None yet
Development

No branches or pull requests

2 participants