GridProtectionAlliance / SIEGate

Secure Information Exchange Gateway
MIT License
6 stars 4 forks source link

Allow each GEP remote to have more than 1 valid Certificate. #5

Closed StevenChisholm closed 7 years ago

StevenChisholm commented 7 years ago

Currently, if I need to update the x509 Certificate for SIEGATE, this would require all parties to schedule the same downtime during this certificate change. This will be an operational nightmare. It would be better if a single connection can have 2 valid client certificates at a time. Then I could notify all parties that on a specific date, I'll be changing my server certificate. This would give them time to add the .cer file to their remote SIEGate servers before the change over.

ritchiecarroll commented 7 years ago

A little confused on this one as you can already do this today simply by having two (or more) valid certificates with associated Subscriber records.

Think I'll close this one unless I missed your point.