github
/
consul
mirror of https://github.com/hashicorp/consul
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
consul/sdk
History
Hans Hasselberg 804eb17094
connect: check if intermediate cert needs to be renewed. (#6835) 
Currently when using the built-in CA provider for Connect, root certificates are valid for 10 years, however secondary DCs get intermediates that are valid for only 1 year. There is no mechanism currently short of rotating the root in the primary that will cause the secondary DCs to renew their intermediates.
This PR adds a check that renews the cert if it is half way through its validity period.

In order to be able to test these changes, a new configuration option was added: IntermediateCertTTL which is set extremely low in the tests.
 		2020-01-17 23:27:13 +01:00
..
freeport connect: check if intermediate cert needs to be renewed. (#6835) 2020-01-17 23:27:13 +01:00
testutil sdk: add NewTestServerT, deprecate NewTestServer (#6761) 2019-11-08 17:51:49 -05:00
README.md Move internal/ to sdk/ (#5568) 2019-03-27 08:54:56 -04:00
go.mod Move internal/ to sdk/ (#5568) 2019-03-27 08:54:56 -04:00
go.sum Move internal/ to sdk/ (#5568) 2019-03-27 08:54:56 -04:00

README.md

Internal SDK

Please note that this folder, while public, is not meant for new consumers of these libraries; this should currently be considered an internal, not external, SDK. It is public due to existing needs from other HashiCorp software. The tags in this folder will stay at the 0.x.y level; accordingly users should expect that things can move around, disappear, or change API at any time.