coolaj86
/
ssl-root-cas.js
1
0
Fork 0
Code Issues 7 Pull Requests Releases Activity
Labels Milestones
New Issue

How to fetch the latest certificates at install time? #3

Open
by Ghost opened 5 years ago · 2 comments
Ghost commented 5 years ago

Hi,
Thanks for your great module!

We were wondering if there was a way to download the latest Root CAs before actually starting the application, instead of having to run it a first time and restart it. Like could we imagine having a postinstall step in package.json?

It would indeed be easier for deploying and running automatically, while being sure to have the latest CAs.

Thanks in advance for your insights!

Hi, Thanks for your great module! We were wondering if there was a way to download the latest Root CAs before actually starting the application, instead of having to run it a first time and restart it. Like could we imagine having a `postinstall` step in package.json? It would indeed be easier for deploying and running automatically, while being sure to have the latest CAs. Thanks in advance for your insights!
coolaj86 commented 5 years ago
Owner

We’ve gone back and forth on this in the past.

Two issues:

  • The version numbers must remain meaningful.

  • A failure to install latest certs should not cause module installation failure, nor log a confusing error message indicating failure.

I’m not sure if there are other concerns.

If we change it we’ll need to bump the major version number. Maybe the docs could say “use vX for manual download and vY for automatic download... or a new module ssl-root-cas-latest.

What do you think?

We’ve gone back and forth on this in the past. Two issues: * The version numbers must remain meaningful. * A failure to install latest certs should not cause module installation failure, nor log a confusing error message indicating failure. I’m not sure if there are other concerns. If we change it we’ll need to bump the major version number. Maybe the docs could say “use vX for manual download and vY for automatic download... or a new module `ssl-root-cas-latest`. What do you think?
Ghost commented 5 years ago

Thanks for your quick answer! I don't like the idea of fragmenting the module and having to choose between vX or vY, so a new module ssl-root-cas-latest would be a decent option.

I agree that it should not make the installation fail, a warning both at the install and at the application startup could do the job I think.

And if this has already been discussed in the past, maybe other people have ended up with their own good manual solution? I don't want to make you having to maintain yet another module! :)

Thanks for your quick answer! I don't like the idea of fragmenting the module and having to choose between vX or vY, so a new module `ssl-root-cas-latest` would be a decent option. I agree that it should not make the installation fail, a warning both at the install and at the application startup could do the job I think. And if this has already been discussed in the past, maybe other people have ended up with their own good manual solution? I don't want to make you having to maintain yet another module! :)
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
master
Labels
Apply labels
Clear labels
No items
No Label
Milestone
Set milestone
Clear milestone
No items
No Milestone
Assignees
Assign users
Clear assignees
No Assignees
2 Participants
Notifications
Due Date

No due date set.

Dependencies

This issue currently doesn't have any dependencies.

Write Preview
Loading…
Cancel
Save
There is no content yet.
Delete Branch '%!s(MISSING)'

Deleting a branch is permanent. It CANNOT be undone. Continue?

No
Yes