open-consul/command/connect/ca/set/test-fixtures/ca_config.json

{
	"Provider": "consul",
	"Config": {
		"PrivateKey": "",
		"RootCert": "",
		"IntermediateCertTTL": "288h"
	}
}
Add CA CLI commands for getting/setting config 2018-05-23 21:44:41 +00:00			`{`
			`"Provider": "consul",`
			`"Config": {`
			`"PrivateKey": "",`
			`"RootCert": "",`
connect: add validations around intermediate cert ttl (#7213) 2020-02-10 23:05:49 +00:00			`"IntermediateCertTTL": "288h"`
Add CA CLI commands for getting/setting config 2018-05-23 21:44:41 +00:00			`}`
connect: check if intermediate cert needs to be renewed. (#6835) Currently when using the built-in CA provider for Connect, root certificates are valid for 10 years, however secondary DCs get intermediates that are valid for only 1 year. There is no mechanism currently short of rotating the root in the primary that will cause the secondary DCs to renew their intermediates. This PR adds a check that renews the cert if it is half way through its validity period. In order to be able to test these changes, a new configuration option was added: IntermediateCertTTL which is set extremely low in the tests. 2020-01-17 22:27:13 +00:00			`}`