Different CA and trust stores for Node and admin certificate.

Hi,

Is it possible to have node certificates signed by one CA and client/admin certificate signed by another CA?

I already have a keystore and truststore for my server which I’m using for node certificate. I do not have a way to get another certificate signed by the same CA.

So can I use a self signed CA and certificate signed by that CA as client/admin certificate?

No, that is not possible. Since the client certificate is used for / allows complete access to the cluster, it has to be trusted by the (root and or intermediate) certificate in the truststore.

···

On Thursday, October 5, 2017 at 6:03:57 PM UTC+2, ihjaz Mohamed wrote:

Hi,

Is it possible to have node certificates signed by one CA and client/admin certificate signed by another CA?

I already have a keystore and truststore for my server which I’m using for node certificate. I do not have a way to get another certificate signed by the same CA.

So can I use a self signed CA and certificate signed by that CA as client/admin certificate?