Project

General

Profile

Actions
Copy link

Bug #10833

closed

Document renaming of /opt/rudder/etc/ssl/rudder-webapp.crt in 4.1

Added by François ARMAND over 7 years ago. Updated over 7 years ago.

Status:
Released
Priority:
N/A
Assignee:
Alexis Mousset
Category:
Documentation
Target version:
4.1.4
Pull Request:
https://github.com/Normation/rudder-d...
Severity:
Critical - prevents main use of Rudder | no workaround | data loss | security
UX impact:
User visibility:
Infrequent - complex configurations | third party integrations
Effort required:
Very Small
Priority:
67
Name check:
Fix check:
Regression:

Description

We changed the name of /opt/rudder/etc/ssl/rudder-webapp.{crt, key} to /opt/rudder/etc/ssl/rudder.{crt, key} in rudder 4.1.
People may rely on these certificates for other things, like configuring sasl in slapd with

TLSCertificateFile /opt/rudder/etc/ssl/rudder-webapp.crt
TLSCertificateKeyFile /opt/rudder/etc/ssl/rudder-webapp.key

And so, it will break. We need to document the change in the upgrade procedure as a breaking change.

Also, this problem may lead to an error during migration to mdb, and so in the worst case, lost of data, which is not very well.

Actions
Copy link

Also available in: Atom PDF