Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

(PUP-11856) State machine renews host cert #9075

Merged
merged 5 commits into from
Jun 27, 2023
Merged

(PUP-11856) State machine renews host cert #9075

merged 5 commits into from
Jun 27, 2023

Commits on Jun 27, 2023

  1. (PUP-11856) State machine renews host cert 

    This commit adds a new NeedRenewedCert class and related logic to the
state machine to handle automatic host/client certificate renewal.
    @mhashizume
    mhashizume committed Jun 27, 2023
    Configuration menu
    Copy the full SHA
    7aec0c7 View commit details
    Browse the repository at this point in the history

  2. (maint) Correct method documentation

    @mhashizume
    mhashizume committed Jun 27, 2023
    Configuration menu
    Copy the full SHA
    7a7852f View commit details
    Browse the repository at this point in the history

  3. (maint) Update test_ca 

    Previously, the build_cert method in Puppet::TestCa needed special logic
for the Eliptical Curve class: ruby/openssl#29

This issue was resolved in OpenSSL 2.0, which was released in 2016,
meaning that all versions of Ruby that Puppet supports includes
Ruby/OpenSSL >= 2.0.

This commit removes special logic for EC in Puppet::TestCa.
    @mhashizume
    mhashizume committed Jun 27, 2023
    Configuration menu
    Copy the full SHA
    13fb548 View commit details
    Browse the repository at this point in the history

  4. (maint) Correct method documentation

    @mhashizume
    mhashizume committed Jun 27, 2023
    Configuration menu
    Copy the full SHA
    62f9948 View commit details
    Browse the repository at this point in the history

  5. (PUP-11856) Update SSL fixtures 

    This commit does three things:

- Update the CA library to enable resuing an SSL private key when
  generating a certificate;
- Enable the certificate generating Rake task to generate a new
  "renewed" certificate to support testing automatic certificate
renewal;
- Regenerate all of the SSL test fixtures using that Rake task.
    @mhashizume
    mhashizume committed Jun 27, 2023
    Configuration menu
    Copy the full SHA
    c5370df View commit details
    Browse the repository at this point in the history