bzed / bzed-dehydrated

Puppet module for centralized CSR signing using Let’s Encrypt™ and lukas2511/dehydrated - keeping your keys safe on the host they belong to.
9 stars 11 forks source link

Intermediate CA Certificate is not changed if the issuer uri stays the same #28

Open gvogets opened 3 years ago

gvogets commented 3 years ago

The letsencrypt change from "DST Root CA X3" to "ISRG Root X1" is not tracked by dehydrated_job_runner.rb if the certificate was first issued before the new intermediate CA became the default because the issuer URI stays the same.