-
Notifications
You must be signed in to change notification settings - Fork 39
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
RDS root certificates must be updated by 3/5/2020 #48
Comments
Hey @gramidt, thank you very much for raising this issue, this is much appreciated. At the moment we are creating the RDS database using Terraform here and by default AWS RDS instances are still created with the old cert (as described in the docs you linked). Then we will probably need to have a discussion about how to test this, especially on existing |
I have added a story in our backlog to update the cert. |
Thank you so much, @irbekrm and @DanielJonesEB! I apologize for the delayed response, but I am very glad you two were able to get this resolved. Have a great rest of your weekend! |
Closing this as it has now been resolved. Thanks for your help, @gramidt ! |
Problem: RDS root certificates will be required to be updated from rds-ca-2015 to rds-ca-2019 by 3/5/2020.
Solution: Update the root certificate used for spinning up RDS via Terraform and update the root certificate located in
control-tower/db/rds_root_cert.go
Line 5 in a615978
Note: I will be happy to implement this change once we agree on the process for doing so.
https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL-certificate-rotation.html
The text was updated successfully, but these errors were encountered: