Bug #10833: Document renaming of /opt/rudder/etc/ssl/rudder-webapp.crt in 4.1 - Rudder - Issue Tracker

Actions

Copy link

Bug #10833

closed

Document renaming of /opt/rudder/etc/ssl/rudder-webapp.crt in 4.1

Added by François ARMAND over 7 years ago. Updated over 7 years ago.

Status:

Released

Priority:

N/A

Assignee:

Alexis Mousset

Category:

Documentation

Target version:

4.1.4

Pull Request:

https://github.com/Normation/rudder-d...

Severity:

Critical - prevents main use of Rudder | no workaround | data loss | security

UX impact:

User visibility:

Infrequent - complex configurations | third party integrations

Effort required:

Very Small

Priority:

Name check:

Fix check:

Regression:

Description

We changed the name of /opt/rudder/etc/ssl/rudder-webapp.{crt, key} to /opt/rudder/etc/ssl/rudder.{crt, key} in rudder 4.1.
People may rely on these certificates for other things, like configuring sasl in slapd with

TLSCertificateFile /opt/rudder/etc/ssl/rudder-webapp.crt
TLSCertificateKeyFile /opt/rudder/etc/ssl/rudder-webapp.key

And so, it will break. We need to document the change in the upgrade procedure as a breaking change.

Also, this problem may lead to an error during migration to mdb, and so in the worst case, lost of data, which is not very well.

Actions

Copy link

Updated by François ARMAND over 7 years ago

User visibility changed from Operational - other Techniques | Technique editor | Rudder settings to Infrequent - complex configurations | third party integrations
Effort required set to Very Small

Actions

Copy link