Comments (2)
Checked the latest code, record in revoked_ssh_certs is only used to prevent renew cert.
from certificates.
Hey @gangxie112, you're correct, we currently only support CRLs for X509 certificates. We haven't had this request many times before and at this time we don't have the resources to add SSH CRLs (KRLs) support ourselves. However, we're open to a community contribution here, similar to how X509 CRLs was implemented by someone from the user community.
There's an existing issue that I think covers what you're looking for: #256. I'm closing this issue in favor of that one. Feel free to reopen if you think this issue is warranted.
from certificates.
Related Issues (20)
- [Bug]: Do not output terminal control codes when output is not a terminal HOT 3
- [Bug]: step ca init ignores --context flag when using --pki
- [Bug]: Get a certificate via SCEP fails with: scep post request failed: crypto/rsa: verification error HOT 8
- [Docs]: Include information on where TLS certificates for the HTTPS API are stored HOT 1
- [Bug]: Docker Container never becomes healthy HOT 3
- [Bug]: Insecure HTTP server is not available after enabling CRL endpoint HOT 3
- Regularly reload provisioners from DB
- [Bug]: wrong oidc provisioner config prevents startup, can't remove provisioner
- Adding CRLIssuer information to crlDistributionPoints HOT 1
- [Bug]: Chang the crl issuing distribution point url or add a url with http HOT 4
- [Docs]: Additional information about the database schema (MySQL) + data in plaintext instead of blobs HOT 1
- Option to use publicly signed cert vs self generated
- Ability to silent logging of /health hits HOT 2
- [Bug]: Doesn't recognize (*.subdomain.domain.com) as valid HOT 2
- [Docs]: Clarify step ca init --remote-management HOT 8
- [Bug]: Change of dns name HOT 15
- TKey integration HOT 4
- wildcard certificates with acme http-01 challenge HOT 2
- [Docs]: step ca token requires the --ca-url HOT 1
- Add an in-memory cookie jar to http.Client returned by NewClient HOT 3
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from certificates.