UNCLASSIFIED - NO CUI

Skip to content

Updating ingress cert and keys

brandt keller requested to merge cert_update_11-22 into master

General MR

Summary

Updating expired ingress certificates

Relevant logs/screenshots

Tested the changes by deploying big bang and access services via the istio public gateway and validating certificate health.

openssl x509 -noout -in fullchain.pem -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:7a:02:cf:7d:ec:7a:89:19:fa:15:85:f8:e7:e2:4c:ca:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R3
        Validity
            Not Before: Nov 28 02:07:30 2022 GMT
            Not After : Feb 26 02:07:29 2023 GMT
        Subject: CN=*.bigbang.dev
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub: 
                    04:41:5d:2e:a5:15:ba:9c:0c:54:79:55:4c:e2:86:
                    45:2c:84:9e:f2:5f:6b:3b:71:71:6a:50:3d:02:86:
                    49:ac:0e:74:fe:8a:06:9e:f7:18:3a:84:49:f3:f3:
                    72:5a:4e:be:18:02:a2:61:12:92:36:07:46:4b:71:
                    56:b8:90:c9:30
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                99:2E:E5:38:A8:82:62:AA:BF:D2:63:EF:C2:EE:27:CA:DF:8E:03:E3
            X509v3 Authority Key Identifier: 
                keyid:14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6

            Authority Information Access: 
                OCSP - URI:http://r3.o.lencr.org
                CA Issuers - URI:http://r3.i.lencr.org/

            X509v3 Subject Alternative Name: 
                DNS:*.bigbang.dev
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
                Policy: 1.3.6.1.4.1.44947.1.1.1
                  CPS: http://cps.letsencrypt.org

            1.3.6.1.4.1.11129.2.4.2: 
                ......u..>.$..M.u.9..X.l].B.z.5.....%........4:......F0D. u.XL...j...Q.....`A.'c...6!.k?.p. ..i.....}.,~..x.m..A,...)}.]6b...u.z2.T..-. .8.R....p2..M;.+.:W.R.R.....4;......F0D. e....{..*2.. 1.H......e.....%0.-. 6....HZ.<....~.P)..M.[.....G.!gE
    Signature Algorithm: sha256WithRSAEncryption
         b8:f7:e0:bd:e9:6d:ff:91:57:ed:95:64:b8:a5:83:31:d7:ca:
         ff:bf:a6:11:49:3a:34:52:97:80:c0:0b:0b:80:18:fa:61:67:
         f4:56:dd:c0:d1:9c:2b:59:02:17:52:2b:8b:8e:53:fc:b1:70:
         2a:53:ad:a1:94:b3:df:3a:24:cd:2a:9b:a0:08:7b:15:bc:fe:
         64:b5:84:9b:ef:eb:72:30:ed:34:2e:f8:d6:70:9f:85:10:0b:
         43:7c:d3:5d:34:3f:7a:4a:3c:fc:aa:4c:6e:ba:49:3f:d4:f0:
         6e:51:fb:f1:72:37:08:30:e5:f1:dc:53:98:ab:25:a5:f1:0d:
         2d:46:1f:90:ad:5d:08:a5:2d:c7:29:01:f2:e5:d0:dc:08:db:
         78:a0:8d:f0:c5:0f:30:32:2c:49:28:43:eb:db:ed:ce:3a:45:
         20:82:b8:e1:d1:31:05:69:03:00:76:45:88:6f:e2:7f:7c:ae:
         b4:07:22:ba:2a:41:91:a7:1b:24:cc:7c:fd:5e:c1:51:96:ea:
         3d:a1:de:20:cc:3b:9e:9e:74:6e:c0:19:5a:b2:2c:37:9a:d0:
         7e:3d:27:65:05:9b:82:4d:c1:a5:1a:ad:b3:0a:a9:3c:c9:a1:
         c4:53:6a:d1:dd:ee:5b:e1:d5:3d:34:51:99:4b:7c:6c:2a:2f:
         d9:4b:d8:f2
Edited by brandt keller

Merge request reports