Project

General

Profile

Actions

Architecture #14861

open

We should make certificates expire on 31 dec 2037

Added by François ARMAND over 5 years ago. Updated over 3 years ago.

Status:
New
Priority:
N/A
Assignee:
-
Category:
Agent
Effort required:
Name check:
Fix check:
Regression:

Description

Today, we make certificate expires after 10 years. But this is an arbitrary value, which has just the advantage to bu sufficiently long to let people know that Rudder is not a PKI, and that they should manage their certificate life cycle by themselves (which is good, it's what we intent).

But for people who are not, they certainly don't want to have all their agent broke at some point in time without easy to understand reason. So we should set for all our certificate the same expiration date, ie 2037-12-31 (which is the end of the epoch, and so the end of the world for current certificate norm).

Actions

Also available in: Atom PDF