Is key rotation made mandatory by 3.1 update?

General Discussions
1

Hello,
for what I’ve understood the update from the 3.0 to the 3.1 version requires creating new certificates, since the ones created with the script shipped with 3.0 does not use the SAN property. Also the storage-proxy certificate is dropped.
Is this correct or there is something I’ve misunderstood?

Thank you very much

2

Hello @spratesi ,

I don’t think so but any specific steps between versions should be covered in the upgrading documentation. I don’t see it, but check out your deployment option (e.g. Kubernetes): Server installation | Mender documentation

Also wanted to note that Mender 3.2 is released recently. :slight_smile:

3

any specific steps between versions should be covered in the upgrading documentation

I’m afraid it’s not…

And this is the commit where the change I’m referring to was made: keygen: Change script and update demo certificate to use SAN · mendersoftware/integration@ea82d53 · GitHub