voxpupuli / puppet-openssl

Puppet OpenSSL module
Apache License 2.0
38 stars 84 forks source link

feature request: manage certificate authority and allow signing certs with a CA #152

Open zilchms opened 1 year ago

zilchms commented 1 year ago

If I interpret this correctly, in #39 there have been attempts made to generate and manage a CA. However, as the original pull request was closed by the original author without apparent reason, there is currently no way to create and manage a CA and generate certificates signed by the managed CA (or any CA for that matter).

I would like to push a discussion, if this is a feature that is wanted/planned as well as find some pointers on how we could implement this. I have thus far looked into the module and roughly understood how it works. Unfortunately I dont think I have the necessary knowledge yet to implement a fitting solution.

Additionally I think, this could be split into several features:

Any comments, pointers and help in general is very appreciated :)