Page MenuHomeDevCentral
Create Task
Maniphest T2112

Renew Vault web server certificate automatically
Open, HighPublic
Actions

Description

As it's still not automated:

Error checking seal status: Get "https://172.27.27.7:8200/v1/sys/seal-status": tls: failed to verify certificate: x509: certificate has expired or is not yet valid: current time 2025-05-18T08:45:40Z is after 2025-04-02T13:44:08Z

Revisions and Commits

rOPS Nasqueron Operations
Needs ReviewD3657 Renew Vault intermediate authority certificate

Event Timeline

dereckson triaged this task as High priority.May 18 2025, 08:46
dereckson created this task.
dereckson added a comment.Wed, Sep 10, 19:31

First step is to create a script to renew all needed certificates:

  • the vault web HTTP API one: already available in Complector sandbox, to proofread and submit
  • the intermediate authority: D3657

Second step is to create a script to check if renewal is needed and renew automatically according the scenario

dereckson added a revision: D3657: Renew Vault intermediate authority certificate.Wed, Sep 10, 19:34
dereckson renamed this task from Renew Vault certificate to Renew Vault HTTP certificate automatically.Wed, Sep 10, 19:38
dereckson renamed this task from Renew Vault HTTP certificate automatically to Renew Vault HTTPS certificate automatically.
dereckson renamed this task from Renew Vault HTTPS certificate automatically to Renew Vault web server certificate automatically.
Nasqueron DevCentral · If it had been much bigger the moon would have had a core of ice. · Powered by Phabricator