LILiK
/
ca_manager
5
0
Fork 0
Code Issues 0 Pull Requests 2 Releases 0 Wiki Activity
Easy CA management
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
51 Commits
7 Branches
218 KiB
 
Tree: d62309ccba
Branches Tags
${ item.name }
Create branch ${ searchTerm }
from 'd62309ccba'
${ noResults }
ca_manager/README.md

1.1 KiB
Raw Blame History

CA manager

This collection of tools is our take on managing a CA, signing SSH keys and certificates, signin SSL certificates.

Tools

request_server.py

This is a shell for a user, the shell only reads the input from the user and return a JSON, this user can be used with Ansible to request and retrive certificates.

The input must be a JSON file, e.g

{
	{
		"keyType": "ssh_host",
		"hostName": "my_new_server",
		"keyData": "ssh-ed25519 aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa root@my_new_server"
	},
	"type": "sign_request"
}

the example is a sign_request for a ssh host certificate.

The shell just output a json with status and reason keys.

{
	"reason" : ...,
	"status" : ...
}

The server logs can be found at /home/request/request_server.log

ca_sheel.py

This is a shell for a user, the shell limits the commands to the one we are interested, like generating a SSH/SSL CA, signing keys.

Configuration

The only configuration needed is the path where to operate, modifying te file paths.py is all is needed.