Re: [new] security/step-ca a private CA and ACME server

On Fri, 26 Aug 2022 at 15:20:25 -0600, Aaron Bieber wrote:
> On Fri, 26 Aug 2022 at 13:24:15 -0600, Aaron Bieber wrote:
> > On Fri, 26 Aug 2022 at 13:15:20 -0600, Aaron Bieber wrote:
> > > Hi!
> > >
> > > Here is a port of step-ca. This is a tool that allows one to manage a
> > > certificate authority, host an ACME server, manage SSH certificates.. and other
> > > fancy things like that.
> > >
> > > I haven't set one up myself yet, but plan on doing so shortly. I have it on
> > > good authority that the previous iteration of this (0.21.0) was working as
> > > expected!
> > >
> > > I will send step-cli shortly - it's the companion tool that goes along with
> > > this.
> > >
> > > OK to import?
> >
> > Bah, forgot to include the rc script.. brb
> >
>
> Here is an updated version with the docs and an rc script included.
>
> To test you will need step-cli installed:
>
> # su -s/bin/sh _step-ca -c "env STEPPATH=/var/step-ca step-cli ca init"
> ... add a password to /var/step-ca/secret.txt (and know that this is bad # practice!!) ...
> # rcctl enable step_ca
> # rcctl set step_ca flags --password-file secret.txt config/ca.json"
>

Eehh hem...