trafficcontrol
trafficcontrol copied to clipboard
Self-Signed certificate management
This Improvement request (usability, performance, tech debt, etc.) affects these Traffic Control components:
- Traffic Portal
Current behavior:
Traffic Ops requires all the parameters configured for default_certificate_info. The API is correctly using all those to generate self-signed certificates within delivery service creation.
Once these self-signed certificates expire, one has to renew them. Here's what we are faced with:
- The "Renew" option on the UI doesn't work: internal server error.
- Using "Generate SSL Keys" on Portal, defaults are not used, which might be causing renew error.
I understand the defaults are created for Traffic Ops and Portal isn't aware of those.
New behavior:
- be able to use "renew" on self-signed certificates
- Should Traffic Portal have optional fields to use defaults?
I wouldn't think TP should have to know about those defaults. TO should a) never reliably reproduce an internal server error for any given input under normal conditions and b) support refreshing certificates using the same method that created them in the first place