Skip to content

v1.4.1: SSL Certificates update

Latest
Latest
Compare
Choose a tag to compare
@evias evias released this 11 Apr 13:55
v1.4.1
1db3163
This commit was signed with the committer’s verified signature.
evias Grégory Saive
GPG key ID: 969F3966D6E87EDF
Learn about vigilant mode.

Installation Notes

Upgrade the yourdlt software on your node with the following command:

$ npm install -g yourdlt@1.4.1

Note that, when applying this release over an already existing node configuration, please run the yourdlt config command using the same parameters -a assembly, -p preset, -t target and -c custom_config.yml and add --upgrade to get the latest configuration fields.

Examples:

$ yourdlt config -t dual-node -a dual -p dhealth -c dual_config.yml --upgrade
$ yourdlt config -t peer-node -a peer -p dhealth -c peer_config.yml --upgrade
$ yourdlt config -t my-own-custom-target-folder -a dual -p dhealth -c my_own_config.yml --upgrade

Also, this update is obligatory as SSL certificates expire after 1 year. It is possible to renew certificates up to 30 days before their expiration.

After having installed the configuration update, following command initiates the SSL certificate renewal:

$ yourdlt renewCertificates -t dual-node

Note in the above that we use dual-node as the target folder, please make sure to replace this with the correct target folder for your node (dual-node is the default as illustrated in our documentation).

Added

  • Adds command renewCertificates using CertificateService to update SSL certificates.
  • Adds caCertificateExpirationInDays to 7300 in shared preset (20 years).
  • Adds nodeCertificateExpirationInDays to 375 in shared preset (1.02 years).
  • Adds certificateExpirationWarningInDays to 30 days in shared preset.

Changed

  • Fixed vulnerabilities: y18n, path-parse, color-string, hosted-git-info, glob-parent.
Assets 2