consul
consul copied to clipboard
Consul tls command should be able to renew
Feature Description
Currently the consul tls
command only has create
functionality for a server certificate. However, to avert having to distribute a new trust chain to all clients, it would be helpful if this also had a consul tls renew
that took the current certificate and key, and generated a new certificate that its CA chain resolves to, to avoid a service disruption to clients.
Use Case(s)
Renewing a Consul TLS Server Certificate with minimal impact to registered nodes.
Hi @reskin89, We have similar issue to alert about TLS expiry in UI https://github.com/hashicorp/consul/issues/19358 and the PR for that https://github.com/hashicorp/consul/pull/19427
Its good suggestion to have renew command as well, looking into this.