You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Specifying the current key id in the GATEWAY_KEY_ID environment variable makes it extremely cumbersome to bootstrap a new environment or do key rotation, so we should store that pointer to the current key id in a persistent data store like etcd or MongoDB.
So that we can rotate certificates.
Fixes#49
TODO
- [x] Move certificates from private key store to certificate store.
- [x] Write migration script.
- [x] Delete all references to `GATEWAY_KEY_ID` env var
- [x] Alter `/cogrpc/service.spec.ts` to use real MongoDB instead of complicated mocks.
- [x] Remove `retrieveOwnCertificates`.
- [x] Remove all `VAULT_*` env vars from functional test dir.
Specifying the current key id in the
GATEWAY_KEY_ID
environment variable makes it extremely cumbersome to bootstrap a new environment or do key rotation, so we should store that pointer to the current key id in a persistent data store like etcd or MongoDB.Equivalent issue in pong service: relaycorp/awala-pong#26
The text was updated successfully, but these errors were encountered: