Re: [new] security/step-ca a private CA and ACME server

On Fri, 26 Aug 2022 at 13:24:15 -0600, Aaron Bieber wrote:
> On Fri, 26 Aug 2022 at 13:15:20 -0600, Aaron Bieber wrote:
> > Hi!
> >
> > Here is a port of step-ca. This is a tool that allows one to manage a
> > certificate authority, host an ACME server, manage SSH certificates.. and other
> > fancy things like that.
> >
> > I haven't set one up myself yet, but plan on doing so shortly. I have it on
> > good authority that the previous iteration of this (0.21.0) was working as
> > expected!
> >
> > I will send step-cli shortly - it's the companion tool that goes along with
> > this.
> >
> > OK to import?
>
> Bah, forgot to include the rc script.. brb
>

Here is an updated version with the docs and an rc script included.

To test you will need step-cli installed:

# su -s/bin/sh _step-ca -c "env STEPPATH=/var/step-ca step-cli ca init"
... add a password to /var/step-ca/secret.txt (and know that this is bad # practice!!) ...
# rcctl enable step_ca
# rcctl set step_ca flags --password-file secret.txt config/ca.json"