-
Notifications
You must be signed in to change notification settings - Fork 6
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
feat: Implement CA certificate renewal #242
Conversation
439b8c3
to
b3b93c6
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I know this pr is still in draft, sorry if you already planned to tackle some of those.
4f8127d
to
2891163
Compare
2891163
to
51e0cc7
Compare
daa77a0
to
f445de0
Compare
4fafed7
to
e3aa0df
Compare
35cb466
to
4ee5f7b
Compare
da0e3ca
to
9fb803f
Compare
0615c69
to
d9fd25f
Compare
d9fd25f
to
392fda8
Compare
type: string | ||
default: 90d | ||
description: > | ||
Signed certificate validity. | ||
The given value must be followed by one of: "m" for minutes, "h" for hours, "d" for days and "w" for weeks. | ||
For example, "1m" for 1 minute, "10w" for 10 weeks. | ||
If no units are given, the unit will be assumed as days. | ||
Defaults to 90 days. | ||
This value should be equal to or shorter than half the root-ca-validity. | ||
Changing this value will trigger generation of a new CA certificate, | ||
revoking all previously issued certificates. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Did we ever talk with Judit Novak to make sure that a minimum value of 1 minute is OK for integration tests?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Yes, that's good enough for them.
Description
Fixes #238, #239 and #241
Checklist: