2 Commits

Author	SHA1	Message	Date
Dominik Csapak	784a50cca0	renew pve-ssl.pem when it nearly expires ... but only if the cert is issued by the ca in /etc/pve/pve-root-ca.pem (by checking the issuer and openssl verify) this way we can reduce the lifetime of the certs without having to worry that they ran out Signed-off-by: Dominik Csapak <d.csapak@proxmox.com>	2019-11-26 13:13:04 +01:00
Fabian Grünbichler	ccfd6ea6d3	add CertHelpers utility ... PVE-specific certificate helper functions Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>	2018-05-02 11:34:52 +02:00