SSL Certificate renew without node private key change

[fboucquez]

feat: renewCertificates command - Only updates when the certificate expires in less than 30 days.
feat: certificate expiration warnings when upgrading - When the certificate expires in less than 30 days
feat: certificate expiration check in healthCheck - Fails when the certificate expires in less than 30 days.

This is the initial work for the https://github.com/symbol/symbol-bootstrap/issues/285

Currently, this PR will help node admins renewing a node SSL certificate but without changing the node/transport private key (or main private key). Ideally, the SSL node certificate is renewed, a new node/transport private key should be used. This requires harvesters.dat migration and a node key relink (link command handles that already).

Once we have the harverters.dat migration tool (catapult tool or ts native if possible), I would include the migration to the renewCertificates so the migration is fairly simple while keeping the security standards by default.

[sonarcloud]

SonarCloud Quality Gate failed.   

0 Bugs
0 Vulnerabilities
1 Security Hotspot
1 Code Smell

No Coverage information
0.0% Duplication

[segfaultxavi]

Minor nitpick

[fboucquez]

Hi @Wayonb @Jaguar0625 , would you like to review this PR? I believe it is important for the near future node maintenance,

This new feature detects, warns, and re-generates node certs when they are close to expiration. It does NOT include node private key regeneration. That feature requires a harvesters.dat migration tool that is outside my expertise. Once we have a migration tool, I can upgrade the renewCertificates in a future PR.

How to test it:
Not expired

symbol-bootstrap wizard
symbol-bootstrap config -c custom-preset.yml
symbol-bootstrap config -c custom-preset.yml  --upgrade (no cert warning)
symbol-bootstrap renewCertificates -c custom-preset.yml  (no cert upgrade)
symbol-bootstrap renewCertificates  (no cert upgrade)

About to expire simulation

symbol-bootstrap wizard
echo 'certificateExpirationWarningInDays: 376' >> custom-preset.yml  (Certificate is always "about to expire")
symbol-bootstrap config -c custom-preset.yml
symbol-bootstrap config -c custom-preset.yml --upgrade  (shows warning)
symbol-bootstrap renewCertificates -c custom-preset.yml (cert upgrade)
symbol-bootstrap renewCertificates (cert upgrade, prompts keys)

Would you like to include this feature as-is (without private key regeneration)? I'm keen to release bootstrap before adding symbol-network to the mix and other code improvements and clean up.

[sonarcloud]

SonarCloud Quality Gate failed.   

0 Bugs
0 Vulnerabilities
1 Security Hotspot
1 Code Smell

No Coverage information
0.0% Duplication