open-consul/website/source/api
Hans Hasselberg 315ba7d6ad
connect: check if intermediate cert needs to be renewed. (#6835)
Currently when using the built-in CA provider for Connect, root certificates are valid for 10 years, however secondary DCs get intermediates that are valid for only 1 year. There is no mechanism currently short of rotating the root in the primary that will cause the secondary DCs to renew their intermediates.
This PR adds a check that renews the cert if it is half way through its validity period.

In order to be able to test these changes, a new configuration option was added: IntermediateCertTTL which is set extremely low in the tests.
2020-01-17 23:27:13 +01:00
..
acl AuthMethod updates to support alternate namespace logins (#7029) 2020-01-14 10:09:29 -05:00
agent docs: Add note about using valid DNS labels for service names (#7035) 2020-01-15 15:36:17 +00:00
connect connect: check if intermediate cert needs to be renewed. (#6835) 2020-01-17 23:27:13 +01:00
features
operator
acl-legacy.html.md
agent.html.md Update force-leave ACL requirement to operator:write (#7033) 2020-01-14 15:40:34 -07:00
catalog.html.md docs: Add note about using valid DNS labels for service names (#7035) 2020-01-15 15:36:17 +00:00
config.html.md
connect.html.md
coordinate.html.md
discovery-chain.html.md
event.html.md
health.html.md Revert "Remove docs refs to NS inference from ACL token" (#6976) 2019-12-20 11:52:50 -05:00
index.html.md
kv.html.md Revert "Remove docs refs to NS inference from ACL token" (#6976) 2019-12-20 11:52:50 -05:00
libraries-and-sdks.html.md
namespaces.html.md
operator.html.md
query.html.md
session.html.md Revert "Remove docs refs to NS inference from ACL token" (#6976) 2019-12-20 11:52:50 -05:00
snapshot.html.md
status.html.md
txn.html.md