Open aureq opened 8 years ago
The idea is to use DynamoDB to store information about certificates that are available for deployment. The table key will be the host name and clients will be allowed to regularly query the table to determine if a recent change has happened. Fields should be:
domain
as the primate keydate
to represent the latest modifications3_region
where the s3 bucket containing the material isbucket
the bucket name in which the material is storedbase_path
a path within the bucket from where to retrieve the materialprivate_key
(bool) to indicate if the private key was (re)generated during the operationNotes:
base_path
is good, or if the full path within the bucket for each item (key, cert, chain) should be used instead.DynamoDB should be updated as soon as the certificate has been issued. Special care should be considered in the eventuality the update is throttled.
Reopening the issue due to aureq#25. The code should also deal efficiently with aureq#28 to ensure DynamoDB performances are changes and reverted at the end of a long running cycle.
At the moment, this no way to determine if an execution has been done correctly. It would be welcome to somehow notify a system to inform of success of failure for each attempted issuance.