ClearOS Bug Tracker


View Issue Details Jump to Notes ] Issue History ] Print ]
IDProjectCategoryView StatusDate SubmittedLast Update
0014581ClearOSapp-certificate-manager - Certificate Managerpublic2017-05-01 17:202017-05-18 08:02
Reporteruser2 
Assigned Touser2 
PrioritynormalSeverityfeatureReproducibilityhave not tried
StatusclosedResolutionfixed 
PlatformOSOS Version
Product Version 
Target Version7.3.1 UpdatesFixed in Version7.3.1 Updates 
Summary0014581: Create certificate manager state file
DescriptionThe Certificate Manager needs to keep track of deployed certificates. For example, consider the case where we have created third party certificates for www.example.com and:

1) imported the certs into the Certificate Manager
2) deployed the certs in the default web server

If we use symlinks to point Apache to the files stored in the Certificate Manager, then we need to make sure these files are not deleted. If not, Apache will refuse to start.

Alternatively, we can create copies of the cert files and place them inside an Apache subdirectory. This solves the delete problem, but creates a new issue: what happens when the certificates are renewed? The Certificate Manager would need to re-copy those renewed certificates to the Apache subdirectory.

In the end, both design methods require some kind of "state" file.

TagsNo tags attached.
Attached Files

- Relationships

-  Notes
(0005631)
user2
2017-05-09 12:50

This tracker issue discussion is interesting:

https://github.com/certbot/certbot/issues/1473 [^]

Let's go with the symlink option with the Debian-like ssl-cert group (if needed).

- Issue History
Date Modified Username Field Change
2017-05-01 17:20 user2 New Issue
2017-05-01 17:22 user2 Status new => confirmed
2017-05-09 12:50 user2 Note Added: 0005631
2017-05-10 09:32 user2 Status confirmed => resolved
2017-05-10 09:32 user2 Fixed in Version => 7.3.1 Updates
2017-05-10 09:32 user2 Resolution open => fixed
2017-05-10 09:32 user2 Assigned To => user2
2017-05-18 08:02 user2 Status resolved => closed