Skip to content
This repository has been archived by the owner on Apr 23, 2019. It is now read-only.

Re-generate certificates #75

Open
octonato opened this issue Nov 22, 2018 · 3 comments
Open

Re-generate certificates #75

octonato opened this issue Nov 22, 2018 · 3 comments

Comments

@octonato
Copy link
Contributor

The current self-signed certificates expired on 14 August 2017.

The certificate is not trusted because the issuer certificate is unknown. The server
might not be sending the appropriate intermediate certificates. An additional root
certificate may need to be imported. The certificate expired on 14 August 2017, 
00:37:51 GMT+2. The current time is 22 November 2018, 20:59. Error code:
SEC_ERROR_UNKNOWN_ISSUER

We should re-generated them.

@wsargent
Copy link
Member

The scripts are kind of a pain in the butt.

It may be better to replace them with a single builder that creates key stores / trust stores from https://github.com/tersesystems/securitybuilder or using the SSLConfig FakeKeyStore set.

@octonato
Copy link
Contributor Author

Yes, indeed. I will have a look on your suggestion.

Thanks @wsargent

@ignasi35
Copy link
Member

+1 to using FakeKeyStore more.

Anything we improve in this sample to create certificates on the fly could eventually be picked up by akka-grpc samples apps too.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

4 participants