Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow providing a nickname in certificate requests #145

Open
Alex-Gomez-Lopez opened this issue Apr 26, 2024 · 0 comments
Open

Allow providing a nickname in certificate requests #145

Alex-Gomez-Lopez opened this issue Apr 26, 2024 · 0 comments
Labels
enhancement New feature or request

Comments

@Alex-Gomez-Lopez
Copy link

BUSINESS PROBLEM
There are customers that want to utilize this plugin to manage different certificates (for different servers) with the same subject and SANs.

Currently, when all those certificates are renewed all of them but one will be overriden. That is, they will all be mapped to the exact same object in TPP, so the certificate that was renewed last will be that object's current certificate and the rest will be put in the history.

PROPOSED SOLUTION
If the plugin allowed providing a DN or nickname in the request then only the corresponding object in TPP's policy tree will be affected, so for each server there could be a "certificate-X" object in TPP with X being a server-specific string that differentiates it from the rest.

CURRENT ALTERNATIVES
There is no good alternative.

Using an adatable log you could move somewhere else the generated certificate object right after first-issuance, so next issuance of a certificate with the same subject and SANs will not clash with that one. However, that means too that when all these certificates are renewed they will be created as individual certificates instead of being put inside the history of its corresponding certificate.

VENAFI EXPERIENCE
5 years.

@Alex-Gomez-Lopez Alex-Gomez-Lopez added the enhancement New feature or request label Apr 26, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant