Commits on Oct 6, 2024

1. pki: T6481: auto import ACME certificate chain into CLI …

   When using an ACME based certificate with VyOS we provide the necessary PEM
   files opaque in the background when using the internal tools. This however will
   not properly work with the CA chain portion, as the system is based on the
   "pki certificate <name> acme" CLI node of a certificate but CA chains reside
   under "pki ca".
   
   This adds support for importing the PEM data of a CA chain issued via ACME into
   the "pki ca AUTOCHAIN_<name> certificate" subsystem so it can be queried by
   other daemons. Importing the chain only happens, when the chain was not already
   added manually by the user.
   
   ACME certificate chains that are automatically added to the CLI are all prefixed
   using AUTOCHAIN_certname so they can be consumed by any daemon. This also adds
   a safeguard when the intermediate CA changes, the referenced name on the CLI
   stays consitent for any pending daemon updates.

   

   c-po committed Oct 6, 2024
   Configuration menu

   • View commit details
   • Copy full SHA for 875764b
   • Browse repository at this point

   Copy the full SHA

   875764b View commit details

   Browse the repository at this point in the history