Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add expiration time of client certificates to the Sessions page with warning if expiration is close to now #99584

Closed
smcvey opened this issue Mar 26, 2023 · 4 comments
Labels
C-enhancement Solution expected to add code/behavior + preserve backward-compat (pg compat issues are exception)

Comments

@smcvey
Copy link
Contributor

smcvey commented Mar 26, 2023

Is your feature request related to a problem? Please describe.
Over time, client certificates will expire. It's easy to forget to regularly renew them and then run into an issue where a connecting application can no longer connect, creating downtime.

Describe the solution you'd like
The expiration date/time should be shown in the Sessions page in the DBConsole. Make it prominent (red warning) if the expiration is within a month or so.

relates to #99422

Jira issue: CRDB-25954

@smcvey smcvey added the C-enhancement Solution expected to add code/behavior + preserve backward-compat (pg compat issues are exception) label Mar 26, 2023
@abhinavg6
Copy link
Contributor

Since the client certs are managed by the customers in their own cert management tooling, those should be tracked through those tools rather than through CRDB. We don't even store client certs in CRDB, but only have access to the CA cert that's used to sign those certs.

@rafiss
Copy link
Collaborator

rafiss commented Jul 14, 2023

Is #103592 enough to resolve this? It adds a metric, but not a warning to the Sessions page. cc @cameronnunez

@cameronnunez
Copy link
Contributor

My understanding was that the metric was a must-have, I think having it visible in DB Console was a "nice-to-have." Not sure if we still need to do the latter

cc @sean-

@maryliag
Copy link
Contributor

maryliag commented Nov 3, 2023

No longer a priority

@maryliag maryliag closed this as completed Nov 3, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
C-enhancement Solution expected to add code/behavior + preserve backward-compat (pg compat issues are exception)
Projects
None yet
Development

No branches or pull requests

5 participants