grindsa / acme2certifier

library implementing ACME server functionality
GNU General Public License v3.0
175 stars 36 forks source link

support for device-attest-01 #188

Open sniper9191 opened 3 weeks ago

sniper9191 commented 3 weeks ago

I would like to integrate acme2certifier with on-premise ADCS, to issue client certificates to MDM-managed macOS devices via ACME. https://support.apple.com/en-eg/guide/deployment/depb95c66a07/web

For client certificates, macOS supports the use of device-attest-01 challenges. Would this be something that is on the roadmap for acme2certifier?

grindsa commented 3 weeks ago

I know the corresponding RFC draft but never had a deeper look as it is still a draft and I was busy with other things. But let me look into this topic after the next release is out which should hopefully be in 1-2 weeks from now

/G