Re: [new] security/step-ca a private CA and ACME server

On 2022/08/26 15:23, Aaron Bieber wrote:
> > Here is an updated version with the docs and an rc script included.

Thanks.


> > To test you will need step-cli installed:
> >
> > # su -s/bin/sh _step-ca -c "env STEPPATH=/var/step-ca step-cli ca init"
> > ... add a password to /var/step-ca/secret.txt (and know that this is bad # practice!!) ...
> > # rcctl enable step_ca
> > # rcctl set step_ca flags --password-file secret.txt config/ca.json"
> >
>
> Eehh hem...

- shouldn't use VARBASE, either use LOCALSTATEDIR (which is already
in SUBST_VARS) or just /var

- don't use 'daemon' class for @newuser

- doesn't rally matter either way but it would be slightly neater to
use post-install for the docs rather than overriding do-install and
adding ${MODGO_INSTALL_TARGET}

otherwise ok