certctl

mirror of https://github.com/shankar0123/certctl.git synced 2026-06-07 19:31:31 +00:00

Files

T

shankar0123 f5fed74d6f feat: M12 — sub-CA mode, ACME DNS-01 challenges, step-ca issuer connector

Sub-CA mode: Local CA loads CA cert+key from disk (CERTCTL_CA_CERT_PATH +
CERTCTL_CA_KEY_PATH) to operate as subordinate CA under enterprise root
(e.g., ADCS). Supports RSA, ECDSA, PKCS#8 keys. Validates IsCA and
KeyUsageCertSign. Falls back to self-signed when paths unset.

DNS-01 challenges: Pluggable DNSSolver interface with script-based hook
implementation. User-provided scripts create/cleanup _acme-challenge TXT
records for any DNS provider. Configurable propagation wait. Enables
wildcard certs and non-HTTP-accessible hosts.

step-ca connector: Smallstep private CA via native /sign API with JWK
provisioner auth. Issuance, renewal, revocation. Registered as iss-stepca.

23 new tests across 3 files. CI test path widened to ./internal/connector/issuer/...

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-21 22:55:50 -04:00

000001_initial_schema.down.sql

Implement M3: expiration threshold alerting with dedup and status transitions

2026-03-15 00:03:43 -04:00

000001_initial_schema.up.sql

perf: add 5 database indexes for scheduler query optimization

2026-03-20 01:20:21 -04:00

000002_agent_metadata.down.sql

feat: M10 — agent metadata collection, Apache httpd + HAProxy target connectors

2026-03-20 02:19:28 -04:00

000002_agent_metadata.up.sql

feat: M10 — agent metadata collection, Apache httpd + HAProxy target connectors