Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Ensure the transport certificate expires in no more than two years #463

Closed
brendandixon opened this issue Oct 14, 2016 · 2 comments
Closed
Milestone

Comments

@brendandixon
Copy link
Contributor

The code needs to set a two-year expiration on the transport certificate and check for / replace nearly expired certificates.

@yuhuijiang
Copy link

Hi @brendandixon @hglkrijger ,
As you know,we are planning to use cloud-init replace WALA doing provision process in RHEL7.4.
But the certificate exporation date is still 32768 in cloud-init,so this enhancement in v2.2.11 seems make no sense.
Any suggestions?
Thx.

@brendandixon
Copy link
Contributor Author

@yuhuijiang The changes affects the life of the transport certificate the agent uses in exchanging data with wireserver. So, the change "makes sense" both for VMs provisioned with cloud-init and those provisioned using the agent. (The agent continues to exist to manage extensions on cloud-init provisioned VMs.)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants