From 9319afb3d97b45dff4bef1e4fc2bac750896af4c Mon Sep 17 00:00:00 2001 From: mervin008 <42179903+mervin008@users.noreply.github.com> Date: Sat, 26 Sep 2026 16:24:04 +0000 Subject: [PATCH] chore: refresh routes.json and the guides from CertPilot --- guides/agents.md | 2 +- guides/ca-accounts-gateways.md | 2 +- guides/certificate-transparency.md | 2 +- guides/certificates.md | 10 +++++++--- guides/cloud-inventory.md | 2 +- guides/dashboard.md | 2 +- guides/deployment.md | 2 +- guides/discovery.md | 2 +- guides/display-tokens.md | 2 +- guides/live-event-stream.md | 2 +- guides/notification-channels.md | 2 +- guides/pki-ca-management.md | 2 +- guides/policies.md | 2 +- guides/renewal-queue.md | 2 +- 14 files changed, 20 insertions(+), 16 deletions(-) diff --git a/guides/agents.md b/guides/agents.md index 844e3bb..d6904f5 100644 --- a/guides/agents.md +++ b/guides/agents.md @@ -1,4 +1,4 @@ - Two APIs, kept completely apart. diff --git a/guides/ca-accounts-gateways.md b/guides/ca-accounts-gateways.md index 79866f8..cdecaea 100644 --- a/guides/ca-accounts-gateways.md +++ b/guides/ca-accounts-gateways.md @@ -1,4 +1,4 @@ - ## Registering diff --git a/guides/certificate-transparency.md b/guides/certificate-transparency.md index e30a01a..7a6cac6 100644 --- a/guides/certificate-transparency.md +++ b/guides/certificate-transparency.md @@ -1,4 +1,4 @@ - This is the half of discovery a network scan cannot reach. A scan answers "what diff --git a/guides/certificates.md b/guides/certificates.md index 108c3d0..c1f1785 100644 --- a/guides/certificates.md +++ b/guides/certificates.md @@ -1,4 +1,4 @@ - `GET /certificates` filters on `status`, `environment`, `common_name`, @@ -51,8 +51,12 @@ a policy that finds something must say so even when it does not block. ## Renewing -`POST /certificates/:id/renew` runs the same path. The key is rotated and the -new one persisted; a renewal that produced a certificate without storing its +`POST /certificates/:id/renew` runs the same path, and asks the CA for the same +lifetime: the template's `validity_days`, or the certificate's own when the +template names none. Before +[#102](https://github.com/certpilot/certpilot/issues/102) a renewal asked for +nothing, and a 90-day certificate could come back lasting a year. The key is +rotated and the new one persisted; a renewal that produced a certificate without storing its matching key would leave a record that looks healthy and cannot terminate TLS. That is only possible for a key CertPilot already holds: a certificate whose `key_custody` is `AGENT` or `EXTERNAL` is refused with `400`, and renewed by diff --git a/guides/cloud-inventory.md b/guides/cloud-inventory.md index 580d736..7f4b2fa 100644 --- a/guides/cloud-inventory.md +++ b/guides/cloud-inventory.md @@ -1,4 +1,4 @@ - The third place certificates hide. A scan finds what is **served**; Certificate diff --git a/guides/dashboard.md b/guides/dashboard.md index d11b631..46a7c75 100644 --- a/guides/dashboard.md +++ b/guides/dashboard.md @@ -1,4 +1,4 @@ - ## Statistics diff --git a/guides/deployment.md b/guides/deployment.md index 4ab7b6a..5f59499 100644 --- a/guides/deployment.md +++ b/guides/deployment.md @@ -1,4 +1,4 @@ - Everything above deployment in this document observes. This changes something diff --git a/guides/discovery.md b/guides/discovery.md index af67aee..86d1679 100644 --- a/guides/discovery.md +++ b/guides/discovery.md @@ -1,4 +1,4 @@ - Scanning is operator-gated because it opens connections to third-party diff --git a/guides/display-tokens.md b/guides/display-tokens.md index 735db42..1dbe0ca 100644 --- a/guides/display-tokens.md +++ b/guides/display-tokens.md @@ -1,4 +1,4 @@ - Create: diff --git a/guides/live-event-stream.md b/guides/live-event-stream.md index 034325d..922da2d 100644 --- a/guides/live-event-stream.md +++ b/guides/live-event-stream.md @@ -1,4 +1,4 @@ - Opens with a `retry:` directive and a `snapshot` event carrying current diff --git a/guides/notification-channels.md b/guides/notification-channels.md index 8e75896..68359a3 100644 --- a/guides/notification-channels.md +++ b/guides/notification-channels.md @@ -1,4 +1,4 @@ - Three channel types have a notifier: `slack`, `webhook`, `email`. Migration 001 diff --git a/guides/pki-ca-management.md b/guides/pki-ca-management.md index a741132..badd340 100644 --- a/guides/pki-ca-management.md +++ b/guides/pki-ca-management.md @@ -1,4 +1,4 @@ - ## Importing the CAs behind a CA account diff --git a/guides/policies.md b/guides/policies.md index 9d805f5..5e23713 100644 --- a/guides/policies.md +++ b/guides/policies.md @@ -1,4 +1,4 @@ - Rule types, all of which are evaluated: diff --git a/guides/renewal-queue.md b/guides/renewal-queue.md index 16ce6ee..3486aee 100644 --- a/guides/renewal-queue.md +++ b/guides/renewal-queue.md @@ -1,4 +1,4 @@ - Renewal is the only part of this system that changes the world. Everything else