apache / trafficcontrol

Apache Traffic Control is an Open Source implementation of a Content Delivery Network
https://trafficcontrol.apache.org/
Apache License 2.0
1.02k stars 339 forks source link

Self-Signed certificate management #7341

Open smalenfant opened 1 year ago

smalenfant commented 1 year ago

This Improvement request (usability, performance, tech debt, etc.) affects these Traffic Control components:

Current behavior:

Traffic Ops requires all the parameters configured for default_certificate_info. The API is correctly using all those to generate self-signed certificates within delivery service creation.

Once these self-signed certificates expire, one has to renew them. Here's what we are faced with:

I understand the defaults are created for Traffic Ops and Portal isn't aware of those.

New behavior:

ocket8888 commented 1 year ago

I wouldn't think TP should have to know about those defaults. TO should a) never reliably reproduce an internal server error for any given input under normal conditions and b) support refreshing certificates using the same method that created them in the first place