play-scala-tls-example icon indicating copy to clipboard operation
play-scala-tls-example copied to clipboard
verified publisher icon playframework

Re-generate certificates

Open octonato opened this issue 7 years ago • 3 comments

The current self-signed certificates expired on 14 August 2017.

The certificate is not trusted because the issuer certificate is unknown. The server
might not be sending the appropriate intermediate certificates. An additional root
certificate may need to be imported. The certificate expired on 14 August 2017, 
00:37:51 GMT+2. The current time is 22 November 2018, 20:59. Error code:
SEC_ERROR_UNKNOWN_ISSUER

We should re-generated them.

octonato avatar Nov 22 '18 20:11 octonato

The scripts are kind of a pain in the butt.

It may be better to replace them with a single builder that creates key stores / trust stores from https://github.com/tersesystems/securitybuilder or using the SSLConfig FakeKeyStore set.

wsargent avatar Nov 28 '18 23:11 wsargent

Yes, indeed. I will have a look on your suggestion.

Thanks @wsargent

octonato avatar Nov 29 '18 07:11 octonato

+1 to using FakeKeyStore more.

Anything we improve in this sample to create certificates on the fly could eventually be picked up by akka-grpc samples apps too.

ignasi35 avatar Nov 29 '18 20:11 ignasi35