search

Fraunhofer-AISEC / trusted-connector

IoT edge platform "Trusted Connector" of the International Data Spaces. Based on Spring Boot, includes Camel message routing, a Camel component for IDSCP2 (including remote attestation with other connectors) and a management web UI.
https://industrial-data-space.github.io/trusted-connector-documentation
Apache License 2.0
45 stars 45 forks source link

Certificate has expired #142

Closed Lasciarti closed 5 months ago

Lasciarti commented 8 months ago

When starting Docker, it prompts that the certificate has expired on January 27, 2024. May I ask if it's possible to update the certificate or give me some suggestions for making my own certificate. Thanks!

gbrost commented 8 months ago

@milux Can you take this, please?

milux commented 8 months ago

We fetched the last certificate from the DAPS-associated Development CA via EST. EST has a facility for certificate renewal, where a new certificate can be obtained when proving possession of the private key belonging to the old certificate. However, this has not been implemented yet, so it may take as a little time. Stay tuned.

In case it's very urgent, you will have to set up your own DAPS instance, see https://github.com/Fraunhofer-AISEC/omejdn-server @gbrost Do you know where the guide for setting up an omejdn instance as a functional DAPS currently resides?

milux commented 8 months ago

Please note that, although you may ask for certificates from our official DAPS (daps.aisec.fraunhofer.de), all demos except one (going to fix this ASAP) are pointing to our development DAPS (daps-dev.aisec...). This is intended, as the "secret" key material of the demos is publicly known and accessible via this repo to everyone, thus not suitable for any semi-productive prototypes equipped with "official" certificates. We may release a new TC minor release with fixed examples today or a little later, please stay tuned.