Redesign of the TLS Certificates Page #7544
Description
As planned in previous milestones, the TLS certificate management UI requires some enhancements to cover difficult failure cases, where DNS records are removed, certificate names are added/removed or expire.
Proposed solution
- Change the TLS certificates page to show a complete list of certificates configured and renewed automatically by each NS8 node.
- Validate certificate modifications to prevent wrong configurations.
- Ensure expired and non-renewable certificates do not prevent to achieve a correct configuration, providing a workable recovery path.
- Monitor certificate renewals and trigger alarms
See also
- https://mattermost.nethesis.it/nethesis/pl/5hksgghyhjboze8knosdegy6xw (design)
- https://mattermost.nethesis.it/nethesis/pl/1pyoni6asibk5pgskfeuszi6br (planning)
- https://community.nethserver.org/t/active-certificate-monitoring-notifications/26003
- https://community.nethserver.org/t/latest-issue-with-letsencrypt/25927
- https://community.nethserver.org/t/ssl-certificate-error-err-cert-date-invalid/25970/19?u=davidep