this series enabled auto-renewing of our self issued certificates by checking the expiry time daily with 'pveupdate' and renewing it if it expires in less than 2 weeks
also reduce the initial lifetime of the certificates to two years this fixes an issue where some os/browsers (macOs Catalina) would reject the certificate with the error: 'REVOKED' since they have now stricter rules for certificates since other os/browsers will probably also make the rules stricter, it makes sense to shorten the time pve-manager: Dominik Csapak (1): renew pve-ssl.pem when it nearly expires PVE/CertHelpers.pm | 6 ++++++ bin/pveupdate | 33 +++++++++++++++++++++++++++++++++ 2 files changed, 39 insertions(+) pve-cluster: Dominik Csapak (1): change certificate lifetime to two years data/PVE/Cluster.pm | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) -- 2.20.1 _______________________________________________ pve-devel mailing list pve-devel@pve.proxmox.com https://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-devel
