Skip to content

Commit

Permalink
Update current ACME protocol readme status notifications
Browse files Browse the repository at this point in the history
Signed-off-by: Jeremy Ho <[email protected]>
  • Loading branch information
jujaga committed Nov 1, 2023
1 parent 9e28037 commit e8c9e98
Show file tree
Hide file tree
Showing 2 changed files with 17 additions and 13 deletions.
4 changes: 3 additions & 1 deletion README.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,9 @@

Automatically update TLS Certificates on OpenShift Routes

**Update: As of August 2023, Entrust (the only approved certificate provider for BC Gov production environments) has discontinued support for Certbot. Currently, Certbot cannot be used to manage your Entrust certificates.**
_Update (August 2023) - Entrust Certificate Services has discontinued ACMEv1 protocol. Current users of BCDevOps Certbot will be unable to renew their certificates at this time if they are using OCIO Identity Management Services' Entrust Certificate Services._

_Update (November 2023) - At this time, the underlying EFF Certbot project and Entrust Certificate Services both support the newer ACMEv2 protocol. However, BCDevOps Certbot currently only supports the older, deprecated, ACMEv1 protocol, and OCIO IMS has not enabled ACMEv2 protocol support at this time. Please consider contacting OCIO Identity Management Services to express your need for ACMEv2 and Certbot support._

To learn more about the **Common Services** available visit the [Common Services Showcase](https://bcgov.github.io/common-service-showcase/) page.

Expand Down
26 changes: 14 additions & 12 deletions docker/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,23 +6,25 @@

Automatically update TLS Certificates on OpenShift Routes

**Update: As of August 2023, Entrust (the only approved certificate provider for BC Gov production environments) has discontinued support for Certbot. Currently, Certbot cannot be used to manage your Entrust certificates.**
_Update (August 2023) - Entrust Certificate Services has discontinued ACMEv1 protocol. Current users of BCDevOps Certbot will be unable to renew their certificates at this time if they are using OCIO Identity Management Services' Entrust Certificate Services._

_Update (November 2023) - At this time, the underlying EFF Certbot project and Entrust Certificate Services both support the newer ACMEv2 protocol. However, BCDevOps Certbot currently only supports the older, deprecated, ACMEv1 protocol, and OCIO IMS has not enabled ACMEv2 protocol support at this time. Please consider contacting OCIO Identity Management Services to express your need for ACMEv2 and Certbot support._

To learn more about the **Common Services** available visit the [Common Services Showcase](https://bcgov.github.io/common-service-showcase/) page.

## Table of Contents

- [Summary](#summary)
- [Environment Variables](#environment-variables)
- [Quick Start](#quick-start)
- [Manual Run](#manual-run)
- [Cleanup](#cleanup)
- [Entrust Usage](#entrust-usage)
- [Tips](#tips)
- [Appendix](#appendix)
- [References](#references)
- [Errata](#errata)
- [License](#license)
- [Summary](#summary)
- [Environment Variables](#environment-variables)
- [Quick Start](#quick-start)
- [Manual Run](#manual-run)
- [Cleanup](#cleanup)
- [Entrust Usage](#entrust-usage)
- [Tips](#tips)
- [Appendix](#appendix)
- [References](#references)
- [Errata](#errata)
- [License](#license)

## Summary

Expand Down

0 comments on commit e8c9e98

Please sign in to comment.