4 commits

Author	SHA1	Message	Date
Matt Keeler	2d2ce1fb0c	Ensure that CA initialization does not block leader election. ... After fixing that bug I uncovered a couple more: Fix an issue where we might try to cross sign a cert when we never had a valid root. Fix a potential issue where reconfiguring the CA could cause either the Vault or AWS PCA CA providers to delete resources that are still required by the new incarnation of the CA.	2021-01-19 15:27:48 -05:00
Kyle Havlovitz	5de81c1375	connect: Add CAManager for synchronizing CA operations	2020-11-13 14:33:44 -08:00
Matt Keeler	3a1058a06b	Move connect root retrieval and cert signing logic out of the RPC endpoints (#8364) ... The code now lives on the Server type itself. This was done so that all of this could be shared with auto config certificate signing.	2020-07-24 10:00:51 -04:00
Matt Keeler	5600069d69	Store the Connect CA rate limiter on the server ... This fixes a bug where auto_encrypt was operating without utilizing a common rate limiter.	2020-06-30 09:59:07 -04:00