maxhoesel-ansible / ansible-collection-smallstep

Unofficial Ansible Collection for Smallstep CLI and the step-ca server

Home Page:https://github.com/smallstep

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

`step_ca_certificate`: Support creating a certificate from a CSR

maxhoesel opened this issue · comments

step-cli ca sign lets a user sign an existing CSR using the CA. The overall process and syntax is very similar to step-cli ca certificate, so it should be possible to use a CSR as an alternative source in step_ca_certificate.
This would require only a csr parameter that, when provided, switches the command to sign instead certificate. In addition, the key file parameter would need to become optional.

Wait this feature.