certctl

mirror of https://github.com/shankar0123/certctl.git synced 2026-06-07 20:11:31 +00:00

Files

T

shankar0123 f5fed74d6f feat: M12 — sub-CA mode, ACME DNS-01 challenges, step-ca issuer connector

Sub-CA mode: Local CA loads CA cert+key from disk (CERTCTL_CA_CERT_PATH +
CERTCTL_CA_KEY_PATH) to operate as subordinate CA under enterprise root
(e.g., ADCS). Supports RSA, ECDSA, PKCS#8 keys. Validates IsCA and
KeyUsageCertSign. Falls back to self-signed when paths unset.

DNS-01 challenges: Pluggable DNSSolver interface with script-based hook
implementation. User-provided scripts create/cleanup _acme-challenge TXT
records for any DNS provider. Configurable propagation wait. Enables
wildcard certs and non-HTTP-accessible hosts.

step-ca connector: Smallstep private CA via native /sign API with JWK
provisioner auth. Issuance, renewal, revocation. Registered as iss-stepca.

23 new tests across 3 files. CI test path widened to ./internal/connector/issuer/...

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-21 22:55:50 -04:00

screenshots

docs: add 9 dashboard screenshots

2026-03-16 15:13:37 -04:00

architecture.md

feat: M12 — sub-CA mode, ACME DNS-01 challenges, step-ca issuer connector

2026-03-21 22:55:50 -04:00

concepts.md

docs: fix SC-081v3 voting claim — not unanimous, zero opposition with 5 abstentions

2026-03-21 16:40:51 -04:00

connectors.md

feat: M12 — sub-CA mode, ACME DNS-01 challenges, step-ca issuer connector