Skip to content

Commit b7ec84e

Browse files
committed
[WFCORE-5744] Proposal rev 2 - update according to feedback and src requirements.
1 parent ddd2251 commit b7ec84e

File tree

1 file changed

+13
-7
lines changed

1 file changed

+13
-7
lines changed

elytron/WFCORE-5744-ssl-certificate-expiration-warning.adoc

Lines changed: 13 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ categories:
66
# Specify the stability level of the feature.
77
# Values can be one of: experimental preview community default
88
stability-level:
9-
- Community
9+
- community
1010
issue:
1111
- https://github.com/wildfly/wildfly-proposals/issues/685
1212
feature-team:
@@ -55,7 +55,6 @@ Long runing server, with periodic information on certificates will allow admins
5555

5656
=== Related Issues
5757

58-
* https://issues.redhat.com/browse/EAP7-1863[EAP7-1863]
5958
* https://issues.redhat.com/browse/WFCORE-5744[WFCORE-5744]
6059

6160
=== Affected Projects or Components
@@ -78,13 +77,18 @@ Long runing server, with periodic information on certificates will allow admins
7877
** Validity semantics:
7978
*** not yet - ceritifacete is still too young
8079
*** EXPIRED - current date is after expiration
81-
*** about to expire - certificate is still valid. If certificate lifespan is week or smaller, this rougly corresponds to day to EOL, otherwise 7 days to EOL
82-
*** valid - more than above boundries
80+
*** about to expire - certificate is still valid. currentData+expiration-watermark.after(cert.getNotAfter))
81+
*** valid - anything else not covered above
8382
* add config options to handle:
84-
** frequency of warning
83+
** frequency of warning(expiration-check-delay)
8584
*** 0 - turn off - one time check on startup as in previous version
86-
*** n+ - millisecconds between periodic checks
87-
85+
*** n+ - minutes between periodic checks
86+
*** Default value: 12h
87+
*** Unit: minutes
88+
** expiration threshold(expiration-watermark)
89+
*** attribute (expressed in minutes) which will mark control how much time till expiration is considered degradation of health(warning)
90+
*** Default value: 7 days
91+
*** Unit: minutes
8892

8993
=== Changed requirements
9094

@@ -171,6 +175,7 @@ cp server.keystore ${SRV_HOME}/standalone/configuration/
171175
[quote, JBoss CLI]
172176
----
173177
/subsystem=elytron/key-store=demoKeyManager:write-attribute(name=expiration-check-delay, value=1000)
178+
/subsystem=elytron/key-store=demoKeyManager:write-attribute(name=expiration-watermark, value=60)
174179
:reload
175180
----
176181

@@ -210,6 +215,7 @@ cp server.keystore ${SRV_HOME}/standalone/configuration/
210215
== Community Documentation
211216

212217
Model/XSD description should be enough as change is not deep and only introudce simple config parameter and additional output KVP in existing command.
218+
However, it might be good to have dedicated paragraph explaining change, since in current proposal periodic check is active.
213219

214220
== Release Note Content
215221

0 commit comments

Comments
 (0)