Updating ingress cert and keys
Compare changes
+ 78
− 159
@@ -4,63 +4,36 @@ istio:
@@ -129,63 +102,36 @@ addons:
@@ -253,63 +199,36 @@ addons:
UNCLASSIFIED - NO CUI
Updating expired ingress certificates
Tested the changes by deploying big bang and access services via the istio public gateway and validating certificate health.
openssl x509 -noout -in fullchain.pem -text
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:7a:02:cf:7d:ec:7a:89:19:fa:15:85:f8:e7:e2:4c:ca:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=Let's Encrypt, CN=R3
Validity
Not Before: Nov 28 02:07:30 2022 GMT
Not After : Feb 26 02:07:29 2023 GMT
Subject: CN=*.bigbang.dev
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:41:5d:2e:a5:15:ba:9c:0c:54:79:55:4c:e2:86:
45:2c:84:9e:f2:5f:6b:3b:71:71:6a:50:3d:02:86:
49:ac:0e:74:fe:8a:06:9e:f7:18:3a:84:49:f3:f3:
72:5a:4e:be:18:02:a2:61:12:92:36:07:46:4b:71:
56:b8:90:c9:30
ASN1 OID: prime256v1
NIST CURVE: P-256
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
99:2E:E5:38:A8:82:62:AA:BF:D2:63:EF:C2:EE:27:CA:DF:8E:03:E3
X509v3 Authority Key Identifier:
keyid:14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
Authority Information Access:
OCSP - URI:http://r3.o.lencr.org
CA Issuers - URI:http://r3.i.lencr.org/
X509v3 Subject Alternative Name:
DNS:*.bigbang.dev
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
Policy: 1.3.6.1.4.1.44947.1.1.1
CPS: http://cps.letsencrypt.org
1.3.6.1.4.1.11129.2.4.2:
......u..>.$..M.u.9..X.l].B.z.5.....%........4:......F0D. u.XL...j...Q.....`A.'c...6!.k?.p. ..i.....}.,~..x.m..A,...)}.]6b...u.z2.T..-. .8.R....p2..M;.+.:W.R.R.....4;......F0D. e....{..*2.. 1.H......e.....%0.-. 6....HZ.<....~.P)..M.[.....G.!gE
Signature Algorithm: sha256WithRSAEncryption
b8:f7:e0:bd:e9:6d:ff:91:57:ed:95:64:b8:a5:83:31:d7:ca:
ff:bf:a6:11:49:3a:34:52:97:80:c0:0b:0b:80:18:fa:61:67:
f4:56:dd:c0:d1:9c:2b:59:02:17:52:2b:8b:8e:53:fc:b1:70:
2a:53:ad:a1:94:b3:df:3a:24:cd:2a:9b:a0:08:7b:15:bc:fe:
64:b5:84:9b:ef:eb:72:30:ed:34:2e:f8:d6:70:9f:85:10:0b:
43:7c:d3:5d:34:3f:7a:4a:3c:fc:aa:4c:6e:ba:49:3f:d4:f0:
6e:51:fb:f1:72:37:08:30:e5:f1:dc:53:98:ab:25:a5:f1:0d:
2d:46:1f:90:ad:5d:08:a5:2d:c7:29:01:f2:e5:d0:dc:08:db:
78:a0:8d:f0:c5:0f:30:32:2c:49:28:43:eb:db:ed:ce:3a:45:
20:82:b8:e1:d1:31:05:69:03:00:76:45:88:6f:e2:7f:7c:ae:
b4:07:22:ba:2a:41:91:a7:1b:24:cc:7c:fd:5e:c1:51:96:ea:
3d:a1:de:20:cc:3b:9e:9e:74:6e:c0:19:5a:b2:2c:37:9a:d0:
7e:3d:27:65:05:9b:82:4d:c1:a5:1a:ad:b3:0a:a9:3c:c9:a1:
c4:53:6a:d1:dd:ee:5b:e1:d5:3d:34:51:99:4b:7c:6c:2a:2f:
d9:4b:d8:f2UNCLASSIFIED - NO CUI