search

debops / ansible-pki

Bootstrap and manage internal PKI, Certificate Authorities and OpenSSL/GnuTLS certificates
GNU General Public License v3.0
65 stars 29 forks source link

Calling `pki-authority sign` fails with unbound variable #49

Open tdavis opened 8 years ago

tdavis commented 8 years ago

When attempting to call lib/pki-authority sign manually (I want to manually sign some CSRs with the authority provided by debops), it fails with: lib/pki-authority: line 661: 4: unbound variable. The line in sub_sign only calls sign_${library}_certificate with 3 arguments;

sign_${library}_certificate "config/${library}-sign.conf" "${input}" "${output}"

Additionally, there is no such function sign_gnutls_certificate, so using that library wouldn't work. It looks like sign-by-host is the only variant used by Ansible tasks here so I doubt this bug would be encountered under normal operation.

drybjed commented 8 years ago

You're right, this feature is incomplete and is not activated by the Ansible playbook. I planned for the ./pki-authority sign command to help with signing custom certificates by the internal CA but I haven't got around to it. I guess that's something to introduce later.

The GnuTLS version of a CA isn't very advanced, I would stick to OpenSSL library in this case.