Release a new tag with updated 2019 CA Certificate for AWS RDS

[Aristatle-Subramaniam]

The latest tag redash/redash:8.0.0.b32245 does not include the commit (#4304) which has updated RDS 2019 CA Certificate

The 2015 Certificate will expire on Feb 05 2020. Can you please release with latest certificate immediately.

Thanks,
Aristatle

[Aristatle-Subramaniam]

@arikfr Thanks for you and your team on making Redash as success-full project. We are one of the beneficiary of using redash.

Currently we are using Redash to query AWS. We are facing an issue of using existing redash image redash/redash:5.0.2.b5486 which internally bundled with 2015 CA certificate to connect to RDS.

We have upgraded our RDS to use 2019 Certificate. I am looking for an image version which includes 2019 RDS Certificate.

I see a PR #4304 which has 2019 CA Certificate but it is not tagged and released. The latest tag I see on git is 8.0.0.

I am wondering is there any possibility of releasing new tagged image which includes 2019 certificate changes.

The current 2015 certificate expires on Feb 2020.

We will be great-full if we get this done sooner.

Thanks,
Aristatle

[arikfr]

Did you upgrade your RDS already to use the new certificate?

[Aristatle-Subramaniam]

I upgraded RDS to use 2019 certificate but the existing redash image started failing, so reverted RDS to use 2015 certificate. But based on AWS Notification, we should upgrade all RDS to use 2019 certificate before Feb 05 2020..

So wondering is there a way to get this done.

[arikfr]

You can create a custom image with the new certificate. I will try to post instructions later on.

…

On Tue, Feb 4, 2020, 11:22 Aristatle-Subramaniam ***@***.***> wrote: I upgraded RDS to use 2019 certificate but the existing redash image started failing, so reverted RDS to use 2015 certificate. But based on AWS Notification, we should upgrade all RDS to use 2019 certificate. So wondering is there a way to get this done. — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#4581?email_source=notifications&email_token=AAAROLGTUJSMJNALCSRZOVDRBG573A5CNFSM4KKOXUM2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEKY3UII#issuecomment-582072865>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAAROLDUXTEIJPTAIZZZ4JDRBG573ANCNFSM4KKOXUMQ> .

[Aristatle-Subramaniam]

Thanks, That would be great help.

[Aristatle-Subramaniam]

@arikfr Hope you find some time to help us on this.

[arikfr]

The image redash/redash:8.0.2.b37747 includes the new CA files. It's hot from the oven,so I didn't have the chance to test it yet. You're welcome to give it a try and let me know.

[Aristatle-Subramaniam]

Thanks @arikfr . Let me try and update you the result.

[arikfr]

@Aristatle-Subramaniam ping.

[Aristatle-Subramaniam]

Thanks @arikfr . I am able to build and deploy redash/redash:8.0.2.b37747 image with new 2019 SSL certificate., It is working as expected.

We truly appreciate all the time and effort you have put into release this image to help us.