mirror of
https://github.com/dehydrated-io/dehydrated.git
synced 2026-01-13 15:13:33 +01:00
New hook: Generate/Fetch external CSR #274
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @lukas2511 on GitHub (Feb 6, 2018).
A new hook will be implemented which allows for external CSR generation or fetching, this should make it possible to use dehydrated to e.g. sign certificates for routers or similar more closed systems without handling their private keys.
@lukas2511 commented on GitHub (Feb 6, 2018):
The hook will be called
generate_csr, and will have the name of the certificate as listed in domains.txt as single parameter. Domain altnames and timestamp can be read from the environment.All names for the certificate order will be extracted from the generated / fetched CSR, so domains.txt can basically contain a simple alias and doesn't need the correct domain-set in this case.
@lukas2511 commented on GitHub (Feb 6, 2018):
Implemented in
63854b752b.@Gnarfoz commented on GitHub (Apr 25, 2018):
The host names of these devices will still need to be publicly reachable, though, right?
Or am I missing something here. 🤔
@lukas2511 commented on GitHub (Apr 25, 2018):
@Gnarfoz at least DNS has to be resolvable from outside so you can use DNS-01, you need to verify ownership of the hostnames in some way
@Gnarfoz commented on GitHub (Apr 25, 2018):
That's what I figured. I'll have to look into DNS-based verification some more. Thanks for the quick reply (and dehydrated in general ❤️)!