Consul certificate expires 2022-08-14
# openssl x509 -text -noout -in consul.crt
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
a5:01:af:8a:04:06:30:9a:91:51:59:91:6c:0f:28:d6
Signature Algorithm: ecdsa-with-SHA256
Issuer: C = US, ST = CA, L = San Francisco, street = 101 Second Street, postalCode = 94105, O = HashiCorp Inc., CN = Consul Agent CA 102686053279227749328233714366723921396
Validity
Not Before: Aug 14 00:08:37 2020 GMT
Not After : Aug 14 00:08:37 2022 GMT
I want to give visibility to our Consul certificate, which is expiring this year and was the cause of a prior incident production#1037 (closed)
- Change issue from the last time we updated consul production#1042 (closed)
- @nnelson: ^ That was from the emergency corrective action.
- Here is the last time we rotated the SSL certificate keys for consul client agents & cluster members: production#2437 (closed)
- RCA https://gitlab.com/gitlab-com/gl-infra/reliability/-/issues/7522
Edited by Nels Nelson