Herman Slatman

Results 80 comments of Herman Slatman

Hey @LeeWong, Yes, `step-ca` does support revocation via ACME. You can revoke a certificate both using the certificate private key as well as the account private key that was used...

I'm going to close this issue, because ACME revocation support has been in `step-ca` for a while. It can be reopened if issues arise. Support for ACME revocation authorization using...

Hi @LecrisUT, @unreality is right about the current Nebula integration. It's used to authenticate using a Nebula certificate to request an X.509 or SSH certificate. Not for requesting a Nebula...

One of the things I added in https://github.com/smallstep/certificates/pull/1075 and https://github.com/smallstep/cli/pull/758 is the ability to provide `--admin-subject` when doing `step ca init`. It'll work when initializing a CA with Remote Management...

@maraino it partially addresses the issue, as it only works when initializing with `--remote-management` enabled. When migrating from `ca.json` to DB backed provisioners, there's currently no option to provide the...

As of now: - EAB management (`acme eab list|add|remove|get`) In general, output could be made more friendly to being piped into other tools for further processing.

Instead of an endpoint that only returns if the admin API is enabled or not, the endpoint could return more capabilities that the CA has enabled or not. This could...

It could work in the `VersionResponse`, but perhaps it should then be called something more generic. It's not returning just a version now and another property will be added. We...

@dopey: what do you think about this approach? This is what @jdoss and I came up with as a pragmatic solution. @jdoss will have a stab at extracting the logic...

@dopey I'm with you on the `context.Context`. It feels like a nice way to do this, but we would have to think about what info we pass in the `context.Context`...