open-consul

Author	SHA1	Message	Date
Ronald	71fb0a723e	Copyright headers for missing files/folders (#16708 ) * copyright headers for agent folder	2023-03-28 18:48:58 -04:00
R.B. Boyer	83bf7ab3ff	re-run gofmt on 1.17 (#11579 ) This should let freshly recompiled golangci-lint binaries using Go 1.17 pass 'make lint'	2021-11-16 12:04:01 -06:00
Hans Hasselberg	315ba7d6ad	connect: check if intermediate cert needs to be renewed. (#6835 ) Currently when using the built-in CA provider for Connect, root certificates are valid for 10 years, however secondary DCs get intermediates that are valid for only 1 year. There is no mechanism currently short of rotating the root in the primary that will cause the secondary DCs to renew their intermediates. This PR adds a check that renews the cert if it is half way through its validity period. In order to be able to test these changes, a new configuration option was added: IntermediateCertTTL which is set extremely low in the tests.	2020-01-17 23:27:13 +01:00

Author

SHA1

Message

Date

Ronald

71fb0a723e

* copyright headers for agent folder

2023-03-28 18:48:58 -04:00

R.B. Boyer

83bf7ab3ff

re-run gofmt on 1.17 (#11579 )

This should let freshly recompiled golangci-lint binaries using Go 1.17
pass 'make lint'

2021-11-16 12:04:01 -06:00

Hans Hasselberg

315ba7d6ad

connect: check if intermediate cert needs to be renewed. (#6835 )

Currently when using the built-in CA provider for Connect, root certificates are valid for 10 years, however secondary DCs get intermediates that are valid for only 1 year. There is no mechanism currently short of rotating the root in the primary that will cause the secondary DCs to renew their intermediates.
This PR adds a check that renews the cert if it is half way through its validity period.

In order to be able to test these changes, a new configuration option was added: IntermediateCertTTL which is set extremely low in the tests.

2020-01-17 23:27:13 +01:00

3 Commits