Skip to content
This repository has been archived by the owner on Apr 19, 2023. It is now read-only.

Only support signing certificate requests and call cfssl directly #22

Merged
merged 1 commit into from Oct 16, 2018

Conversation

mobileoverlord
Copy link
Contributor

This PR does the following

  • Remove functions that create public / private key pairs and default to only accepting certificate signing requests.
  • Do not call cfssl serve to bring up cfssl web servers to handle requests. Call cfssl directly.
  • Cleans up other unused functions and tests.

Copy link
Contributor

@fhunleth fhunleth left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm approving this in principle since I think this is the right approach. How are we making sure that the CN is set how we want it to be? It is that nerves_hub_ca only responds to requests from nerves_hub_web and we trust nerves_hub_web to make good requests?

@mobileoverlord
Copy link
Contributor Author

Yes, currently nerves_hub_ca will only trust requests from nerves_hub_web.

@mobileoverlord mobileoverlord merged commit 39c4712 into master Oct 16, 2018
@mobileoverlord mobileoverlord deleted the csr-only branch October 16, 2018 13:39
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants