[TRACKERBUG] Update region certs to accommodate 4096 length on EC2
Update region certs to accommodate 4096 length on EC2
IPv6 access to regionsrv running in us-west2
rjschwei
moderate
recommended
Recommended update for regionServiceClientConfigEC2
This update for regionServiceClientConfigEC2 contains the following fixes:
- Update to version 4.3.0 (bsc#1228363)
+ The IPv6 cert was switched up for the region server running in us-west-2
and as such the SSL handshake was failing. Drop the incorrect cert
and add the correct cert.
- Switch the patch syntax away form the deprecated shorthand macro
- Version 4.2.0
Replace certs (length 4096):
rgnsrv-ec2-cn-north1 -> 54.223.148.145 expires in 8 years
rgnsrv-ec2-us-west2-2 -> 54.245.101.47 expires in 9 years
Sidenote: We have one server with a short cert (2048) left;
34.197.223.242 expires in 2027
- Version 4.1.1
Add patch to not serve IPv6 addresses on SLES12
Related to bsc#1218656
- Update to version 4.1.1 (bsc#1217536)
+ Replace 54.247.166.75.pem and 54.253.118.149.pem old soon to expired certs
with new generated ones that expire in 8 years and have longer length (4096)
regionServiceClientConfigEC2