Automatically renew certificates on macOS hosts - Githubissues

fleetdm / fleet

Open-source platform for IT, security, and infrastructure teams. (Linux, macOS, Chrome, Windows, cloud, data center)

https://fleetdm.com

Other

3.12k stars 431 forks source link

Automatically renew certificates on macOS hosts #13421

Open noahtalerman opened 1 year ago

noahtalerman commented 1 year ago

Goal

User story
As an IT admin,
I want to renew the custom certificates 30 days before they expire
so that the user doesn’t lose access to internal applications or my organization’s network.

✅ "Custom keychain certificates with auto-renew" (Fleet Premium)

Changes

Fleet automatically checks certificates expiry and starts to try to renew the cert 30 days before expiration
If a cert needs renewal, Fleet gets a cert from the configured certificate authority (CA) and sends it to the host

Product

[ ] UI changes: TODO
[ ] CLI usage changes: TODO
[ ] Permissions changes: TODO
[ ] Outdated documentation changes: TODO
[ ] Changes to paid features or tiers TODO

Engineering

[ ] REST API changes: TODO
[ ] Database schema migrations: TODO
[ ] Documentation changes complete

Product quality

[ ] QA complete
[ ] ...

ℹ️ Please read this issue carefully and understand it. Pay special attention to UI wireframes, especially "dev notes".

Context

Requestor(s): _____

QA

Risk assessment

Requires load testing: TODO
Risk level: Low / High TODO
Risk description: TODO

Manual testing steps

Step 1
Step 2
Step 3

Testing notes

Confirmation

[ ] Engineer (@____): Added comment to user story confirming succesful completion of QA.
[ ] QA (@____): Added comment to user story confirming succesful completion of QA.

noahtalerman commented 4 months ago

Hey @dherder heads up, I updated the title to reflect updating certificates on macOS hosts. Same for #13420 and #13422.

If we want to track certificate requests for other platforms please file a separate issue. Thanks!