Skip to content

Backport of test: update certs for 10 year expiry into release/1.16.x#19560

Merged
hc-github-team-consul-core merged 1 commit into
release/1.16.xfrom
backport/dans/NET-6450/update-cert-for-10-years/precisely-infinite-gecko
Nov 7, 2023
Merged

Backport of test: update certs for 10 year expiry into release/1.16.x#19560
hc-github-team-consul-core merged 1 commit into
release/1.16.xfrom
backport/dans/NET-6450/update-cert-for-10-years/precisely-infinite-gecko

Conversation

@hc-github-team-consul-core
Copy link
Copy Markdown
Collaborator

Backport

This PR is auto-generated from #19481 to be assessed for backporting due to the inclusion of the label backport/1.16.

The below text is copied from the body of the original PR.


Description

Updates to make sure that test certs expire after ~10 years. I also noticed some root CAs will expire in the next couple of years, so those are also updated.

There is one remaining cert that expires < 5 years, ./test/ca_path/cert1.crt. I didn't know off the top of my head how to replicate the error case, so we will revisit in 2025?

Testing & Reproduction steps

Tests are run in CI.

PR Checklist

  • updated test coverage
  • external facing docs updated
  • appropriate backport labels added
  • not a security concern

Overview of commits

@hc-github-team-consul-core hc-github-team-consul-core force-pushed the backport/dans/NET-6450/update-cert-for-10-years/precisely-infinite-gecko branch from 902eca3 to 2e96f9a Compare November 7, 2023 19:58
@hc-github-team-consul-core hc-github-team-consul-core force-pushed the backport/dans/NET-6450/update-cert-for-10-years/precisely-infinite-gecko branch from 72e76eb to ed0fc8a Compare November 7, 2023 19:58
Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Auto approved Consul Bot automated PR

@github-actions github-actions Bot added theme/cli Flags and documentation for the CLI interface theme/tls Using TLS (Transport Layer Security) or mTLS (mutual TLS) to secure communication theme/certificates Related to creating, distributing, and rotating certificates in Consul labels Nov 7, 2023
@vercel vercel Bot temporarily deployed to Preview – consul November 7, 2023 20:04 Inactive
@hc-github-team-consul-core hc-github-team-consul-core merged commit 375b8e1 into release/1.16.x Nov 7, 2023
@hc-github-team-consul-core hc-github-team-consul-core deleted the backport/dans/NET-6450/update-cert-for-10-years/precisely-infinite-gecko branch November 7, 2023 20:12
mbrulatout pushed a commit to criteo-forks/consul that referenced this pull request Dec 28, 2023
…hashicorp#19560)

backport of commit d6283a9

Co-authored-by: DanStough <dan.stough@hashicorp.com>
mbrulatout pushed a commit to criteo-forks/consul that referenced this pull request Dec 28, 2023
…hashicorp#19560)

backport of commit d6283a9

Co-authored-by: DanStough <dan.stough@hashicorp.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

theme/certificates Related to creating, distributing, and rotating certificates in Consul theme/cli Flags and documentation for the CLI interface theme/tls Using TLS (Transport Layer Security) or mTLS (mutual TLS) to secure communication

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants