Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Issued certificates versioning #17

Open
tgragnato opened this issue Dec 20, 2023 · 0 comments
Open

Issued certificates versioning #17

tgragnato opened this issue Dec 20, 2023 · 0 comments
Assignees
Labels
enhancement New feature or request icebox Not planned yet / Low priority

Comments

@tgragnato
Copy link
Contributor

Feature Request

Q A
New Feature yes
RFC yes
BC Break no

Summary

The versioning of issued certificates by an internal certification authority (CA) is a recommended practice for several reasons:

  1. Traceability: Versioning allows tracking and managing various versions of a certificate over time. This is particularly important for monitoring and issue resolution, as it quickly identifies which version of a certificate is currently in use or has been revoked.
  2. Updates and Renewals: When a certificate needs to be renewed or updated (e.g., due to a compromised key or other changes), versioning facilitates the process. Each new version can clearly indicate changes made compared to the previous version.
  3. Compliance and Auditing: Versioning contributes to compliance with regulations and simplifies security audits. Regulatory bodies and security inspectors can review the version history to ensure that the CA is following proper procedures and managing certificates appropriately.
  4. Communication and Notifications: In the event a certificate needs to be revoked or replaced promptly, versioning provides a clear way to communicate to users or other relevant systems that a new version of the certificate is available.

This feature request involves implementing an additional set of APIs and expanding the interface of the persistence layer (storage) to support this functionality.

@tgragnato tgragnato assigned tgragnato and unassigned tgragnato Dec 22, 2023
@tgragnato tgragnato added enhancement New feature or request icebox Not planned yet / Low priority labels Jan 5, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request icebox Not planned yet / Low priority
Projects
None yet
Development

No branches or pull requests

1 participant