Add command to issue context-specific x509 auth

未關閉
#1,509 0 則留言 0 個 reaction 已指派 1 人 在 GitHub 檢視

維護者通常 1 天內回覆

@hslatman 已經在處理了。

開始於 2025年11月11日。

評估

這個 Issue 還沒有評估資料。

描述

enhancement needs triage

Hello!

  • Vote on this issue by adding a 👍 reaction
  • If you want to implement this feature, comment to let us know (we'll work with you on design, scheduling, etc.)

Issue details

When using the cli tool it can be useful to set STEP_ADMIN_CERT and STEP_ADMIN_KEY especially when testing.

It would be nice if there was a step command that would do the following steps auto-magically 🪄

  1. Issue a certificate pair for your own email from authority-admin
  2. Set the STEP_ADMIN_CERT and STEP_ADMIN_KEY

This would be nice if it respected contexts as well as those are a PITA to work around when using the env auth

Why is this needed?

The cert based env auth is super nice to limit re-issuances during testing, something like the command below allowing the user to set the end time on the auth x509. Then automatically using that cert for auth in that context until it expires (or is revoked

step ca login --context <CTX> --provisioner <etc> --valid-until <1h> <etc>

step ca logout --context <CTX> # To wrapper the revoke and undo actions
主要語言
Go
星號
4.3k
分支
320
平均合併
2 天 3 小時
30 天內合併 PR
11

環境準備

從這裡開始

  1. 先讀完整個 Issue,再讀專案的貢獻指南。
  2. 在 Issue 下留言說明你要接手 —— 這能避免兩個人做同樣的事。
  3. Fork 儲存庫,在一個分支上完成修改。
  4. 送出 Pull Request,並在描述裡引用這個 Issue 編號。

smallstep/cli 的其他 Issue

查看 smallstep/cli 的全部 Issue

相似的 Issue

更多 Go Issue

把新 issue 寄到你的電子郵件信箱

精選適合新手參與的 GitHub issue 摘要。