Open tdavis opened 8 years ago
You're right, this feature is incomplete and is not activated by the Ansible playbook. I planned for the ./pki-authority sign
command to help with signing custom certificates by the internal CA but I haven't got around to it. I guess that's something to introduce later.
The GnuTLS version of a CA isn't very advanced, I would stick to OpenSSL library in this case.
When attempting to call
lib/pki-authority sign
manually (I want to manually sign some CSRs with the authority provided by debops), it fails with:lib/pki-authority: line 661: 4: unbound variable
. The line insub_sign
only callssign_${library}_certificate
with 3 arguments;Additionally, there is no such function
sign_gnutls_certificate
, so using that library wouldn't work. It looks likesign-by-host
is the only variant used by Ansible tasks here so I doubt this bug would be encountered under normal operation.