Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Enable certificate rotation in security demo #11

Closed
trilokgm opened this issue Mar 27, 2019 · 0 comments · Fixed by #12
Closed

Enable certificate rotation in security demo #11

trilokgm opened this issue Mar 27, 2019 · 0 comments · Fixed by #12

Comments

@trilokgm
Copy link
Contributor

In the initial version of security-demo, certificate rotation was not possible due to keystore dependency in ghostunnel. The keystore is generated one-time during deployment and during rotation of certificate and keys, the updated keystore was not being created in the scripts.

Ghostunnel supports two formats of keystore, pkcs12 and single file containing certificate and key.
To generate a single file with certificate and key, spiffe-helper must be updated to generate the single file format given the same names of certificate and key in helper.conf.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant