status-im
/
consul
mirror of https://github.com/status-im/consul.git
2
0
Fork 0
Code Issues Projects Releases Wiki Activity
consul/command/connect/ca/set/test-fixtures/ca_config.json

10 lines
140 B
JSON
Raw Normal View History

Add CA CLI commands for getting/setting config
2018-05-23 21:44:41 +00:00
{
"Provider": "consul",
"Config": {
"PrivateKey": "",
"RootCert": "",
connect: check if intermediate cert needs to be renewed. (#6835) Currently when using the built-in CA provider for Connect, root certificates are valid for 10 years, however secondary DCs get intermediates that are valid for only 1 year. There is no mechanism currently short of rotating the root in the primary that will cause the secondary DCs to renew their intermediates. This PR adds a check that renews the cert if it is half way through its validity period. In order to be able to test these changes, a new configuration option was added: IntermediateCertTTL which is set extremely low in the tests.
2020-01-17 22:27:13 +00:00
"RotationPeriod": "24h",
connect: add validations around intermediate cert ttl (#7213)
2020-02-10 23:05:49 +00:00
"IntermediateCertTTL": "288h"
Add CA CLI commands for getting/setting config
2018-05-23 21:44:41 +00:00
}
connect: check if intermediate cert needs to be renewed. (#6835) Currently when using the built-in CA provider for Connect, root certificates are valid for 10 years, however secondary DCs get intermediates that are valid for only 1 year. There is no mechanism currently short of rotating the root in the primary that will cause the secondary DCs to renew their intermediates. This PR adds a check that renews the cert if it is half way through its validity period. In order to be able to test these changes, a new configuration option was added: IntermediateCertTTL which is set extremely low in the tests.
2020-01-17 22:27:13 +00:00
}