XML

Word

Printable

Release Notes:
New Feature
Release Notes Summary:

Hide
When requesting that a certificate be signed, the `certificate-status` API endpoint can now accept a TTL in its body under the key `cert_ttl`, which will determine the validity period of the cert being signed. The unit defaults to seconds but can be specified with the same unit markers Puppet's settings understand.

This note can probably be combined with the one on PE-27489, to indicate that a per-cert TTL can be set either via the HTTP API directly, or via these CLI commands.

Show
When requesting that a certificate be signed, the `certificate-status` API endpoint can now accept a TTL in its body under the key `cert_ttl`, which will determine the validity period of the cert being signed. The unit defaults to seconds but can be specified with the same unit markers Puppet's settings understand. This note can probably be combined with the one on PE-27489, to indicate that a per-cert TTL can be set either via the HTTP API directly, or via these CLI commands.

Story

As a user, I would like to generate certificates with a specific TTL to meet my security standards.

Background

We need to add a --ttl flag to the puppetserver cli and setting it via the API is a requirement of that. See this comment for more details.