Certificate Retrieve Flow
serial numberexpiry datecommon name
Correct host list
Retrieve last backup file and rename
Retrieve certificate info from Venafi
Confirm implementation host list
End
valid to180 days?
* Calculate MD5 hash of private key and ssl cert* Extract info from ssl cert
Output renewed cert info
Replace renewed ssl cert to target server
Backup existing cert file
False
True
* Copy renewed cert to target server* Import renewed cert to jks
Retrieve config info from mule-domain-config.xml
Input value
Start
Output prior cert info
* Extract alias name from jks* Backup existing jks file
usernamepasswordcert categorymanaged DN
Renew certificate from venafi
Save to PEM file
Certificate Renewal Flow
* Retrieve ssl cert path from rproxy.conf* Retrieve private key path from rproxy.conf* Backup ssl cert and private key
Update certs-renew.yml
Retrieve cert path from config file
Replace renewed cert to target server
