Skip to content
Docs

Certificate Auto-Rotation

The connect agent manages its CA certificate lifecycle automatically.

  • On every proxy start, the agent checks the CA certificate expiry date.
  • If the certificate expires within 30 days, a new CA certificate is generated automatically.
  • The old certificate is backed up before rotation (e.g., ca-cert.pem.backup).
  • A log message reminds the administrator to re-install the new CA certificate in the system trust store after rotation.