consul

Commit Graph

Author	SHA1	Message	Date
Hans Hasselberg	6739fe6e83	connect: add validations around intermediate cert ttl (#7213 )	2020-02-11 00:05:49 +01:00
Hans Hasselberg	804eb17094	connect: check if intermediate cert needs to be renewed. (#6835 ) Currently when using the built-in CA provider for Connect, root certificates are valid for 10 years, however secondary DCs get intermediates that are valid for only 1 year. There is no mechanism currently short of rotating the root in the primary that will cause the secondary DCs to renew their intermediates. This PR adds a check that renews the cert if it is half way through its validity period. In order to be able to test these changes, a new configuration option was added: IntermediateCertTTL which is set extremely low in the tests.	2020-01-17 23:27:13 +01:00
Kyle Havlovitz	6ca7543ea6	Add CA CLI commands for getting/setting config	2018-06-14 09:42:22 -07:00

Author

SHA1

Message

Date

Hans Hasselberg

6739fe6e83

connect: add validations around intermediate cert ttl (#7213 )

2020-02-11 00:05:49 +01:00

Hans Hasselberg

804eb17094

connect: check if intermediate cert needs to be renewed. (#6835 )

Currently when using the built-in CA provider for Connect, root certificates are valid for 10 years, however secondary DCs get intermediates that are valid for only 1 year. There is no mechanism currently short of rotating the root in the primary that will cause the secondary DCs to renew their intermediates.
This PR adds a check that renews the cert if it is half way through its validity period.

In order to be able to test these changes, a new configuration option was added: IntermediateCertTTL which is set extremely low in the tests.

2020-01-17 23:27:13 +01:00

Kyle Havlovitz

6ca7543ea6

Add CA CLI commands for getting/setting config

2018-06-14 09:42:22 -07:00

3 Commits