KNEL/KNELCa
9
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[#800] prod step-ca ACME endpoint LIVE on tsys-ca (fleet-root chain); http-01 validation fetch open
ci / audit (push) Failing after 1m1s
Details

Browse Source 
compose.yaml: host networking (bridge+embedded-DNS broke rooted-name
lookups), :8443 via ca.json address, image digest-pinned; init-stepca.sh:
scaffold + ECDSA-P256 intermediate signed by /root/ca-root fleet root
(verified), ACME provisioner, managed password. Directory serving
RFC8555 on tailnet. OPEN: step-ca validation GET fails instantly with
zero dial attempts (authz says could-not-connect) — bisected caps,
read_only, bridge vs host, container DNS. Debug continues next run
(GODEBUG=netdns=2 + strace plan).
https://projects.knownelement.com/issues/800
This commit is contained in:
mrcharles
2026-09-05 09:35:25 -05:00
parent c66430a397
commit 6e4f794b03
3 changed files with 110 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.crush/active-ticket
+1 -1
View File
@@ -1 +1 @@
#697
#800