kevgliss

If no baseline is available, diffy will attempt to cluster the hosts. Diffy should issue a warning that the results of this cluster may not be meaningful when the number...

We allow multiple commands to be specified by: https://github.com/Netflix-Skunkworks/diffy/blob/master/diffy/config.py#L199 and https://github.com/Netflix-Skunkworks/diffy/blob/master/diffy/config.py#L194 These are then issued in series on the host. However when multiple commands are passed the output is not...

Token based authentication

1

Security monkey should have some way to access it's API programatically. The simplest way to do this would allow a user to create an an API token. That could be...

Support for Additional Key Formats

2

Lemur current only supports the RSA key format. This is the default key format for generating certificates. This issue will act as a container issue for supporting additional formats. -...

Additional certificate metadata fields

3

Explore adding additional metadata fields to certificate. Currently have a requirement to track CDP and PCI scope.

Issuer plugins Should have some order

2

For a freshly launched instance of Lemur, it may make sense to make 'Cryptography' the default issuer plugin to avoid confusion. Surfaced by: #837

Create AWS Certificate Manager Plugin

2

This would be quite a bit of a departure from the current workflow as no CSR would be created for this plugin (or it could simply be ignored).

Do doing a 'like' query on the certificate table is very expensive. When creating a new certificate we attempt to dedup the name, instead we should let the database insert...

Add the description to the notification email with additional context for a given certificate, and add the ID for a given certificate to prevent ambiguity.