Right now on issuing time acme-chief only saves the chained cert type and generates the other two when the certificate is moved from new to live. This behaviour triggers OCSP stapling issuing when staging_time is set to >3600 seconds
Description
Details
Status | Subtype | Assigned | Task | ||
---|---|---|---|---|---|
Resolved | Vgutierrez | T229091 acme-chief failing in puppet with "Cannot open input file" | |||
Resolved | Vgutierrez | T229096 Provide the three cert types (chain-only, cert only and chained) as soon as we get the certificate issued |
Event Timeline
Change 526840 had a related patch set uploaded (by Vgutierrez; owner: Vgutierrez):
[operations/software/acme-chief@master] acme_chief: Save the certificate using the 3 save modes on issuance time
Change 526840 merged by Vgutierrez:
[operations/software/acme-chief@master] acme_chief: Save the certificate using the 3 save modes on issuance time
Change 527364 had a related patch set uploaded (by Vgutierrez; owner: Vgutierrez):
[operations/software/acme-chief@master] Release 0.20
Change 527364 merged by Vgutierrez:
[operations/software/acme-chief@master] Release 0.20
Change 527373 had a related patch set uploaded (by Vgutierrez; owner: Vgutierrez):
[operations/software/acme-chief@debian] acme_chief: Save the certificate using the 3 save modes on issuance time
Change 527374 had a related patch set uploaded (by Vgutierrez; owner: Vgutierrez):
[operations/software/acme-chief@debian] Release 0.20
Change 527375 had a related patch set uploaded (by Vgutierrez; owner: Vgutierrez):
[operations/software/acme-chief@debian] debian: Add release 0.20 to changelog
Change 527373 merged by jenkins-bot:
[operations/software/acme-chief@debian] acme_chief: Save the certificate using the 3 save modes on issuance time
Change 527374 merged by jenkins-bot:
[operations/software/acme-chief@debian] Release 0.20
Change 527375 merged by jenkins-bot:
[operations/software/acme-chief@debian] debian: Add release 0.20 to changelog
Mentioned in SAL (#wikimedia-operations) [2019-08-02T05:21:07Z] <vgutierrez> uploaded acme-chief 0.20 to apt.wikimedia.org (buster) - T229096
Mentioned in SAL (#wikimedia-operations) [2019-08-02T06:46:52Z] <vgutierrez> upgrading acme-chief to version 0.20 in acme-chief test instances - T229096
Mentioned in SAL (#wikimedia-operations) [2019-08-19T06:37:17Z] <vgutierrez> upgrading acme-chief to version 0.20 on production servers - T229096