ModioAB / caramel

Caramel is a CA Registry Manager
GNU Affero General Public License v3.0
16 stars 5 forks source link

Support for IP in subjectAltName #44

Open Spindel opened 7 years ago

Spindel commented 7 years ago

For kubernetes we need to support IP's as subjectAltName.

Envisioned usage for this is that tagging of extras in SAN will be done on the server/tooling site.

Suggested usage caramel_tool --add-san IP 10.10.0.1 $ID

Perhaps a --list-san and --clear-san needed too.

Implementation:

And rather than adding SAN DNS in the sign method, we add it on the request received/inserted, and populate it further.

Spindel commented 7 years ago

This is needed for Kubernetes integration / support