Gregory Thiemonge 0f168dc9ca Increase validity period of Octavia CA and certificates ... Current validity period of Octavia CA and certificates is one year, this is too short for cloud deployments: Octavia services can no longer control a load balancer that has been running for more than one year (dataplane still works, but cannot be configured). This commit defines these values: - Octavia CA validity period is 50 years. - Octavia client certificate validity period is 10 years. For existing deployment, the existing CA private key is fetched from controllers, is updated using AES256 cipher if needed, then the key is used to generate a new CA. Using an existing private key for this CA allows to keep compability with existing client certificates. Change-Id: I435c86306ecd5e0cafeda9d8d468483b7a34f040 Related-Bug: #1869203		2020-06-11 08:12:37 +02:00
..
meta	Scan existing controllers on update to pick up existing certs/private keys	2020-05-26 15:21:09 +02:00
tasks	Increase validity period of Octavia CA and certificates	2020-06-11 08:12:37 +02:00