az-hop icon indicating copy to clipboard operation
az-hop copied to clipboard

Rotate certificates

Open xpillons opened this issue 3 years ago • 7 comments

To avoid certificate expiration when using the default certificate, make sure to renew at least every 90 days as it's the default expiration period.

https://github.com/srvrco/getssl

xpillons avatar Nov 16 '21 10:11 xpillons

Hi @xpillons , we ran into this today. Are there any plans to implement auto-rotation of the certificates? Thanks!

matt-chan avatar Jan 09 '23 18:01 matt-chan

cc @ltalirz

matt-chan avatar Jan 09 '23 18:01 matt-chan

please have a look to https://github.com/Azure/az-hop/issues/450 on how to solve it

xpillons avatar Jan 09 '23 19:01 xpillons

Thank you! Will we have to do this every 90 days?

matt-chan avatar Jan 09 '23 19:01 matt-chan

yes until this rotate certificate is implemented.

xpillons avatar Jan 09 '23 19:01 xpillons

Got it. We'll add it to our maintenance schedule!

matt-chan avatar Jan 09 '23 19:01 matt-chan

There are well-established ansible roles that automate this process, very easy to use https://github.com/geerlingguy/ansible-role-certbot

ltalirz avatar Aug 16 '23 08:08 ltalirz