3 Commits

Include renames

Author	SHA1	Message	Date
mrcharles	01197dd761	[#385] SSH CA live on fleet step-ca: user cert issuance + e2e ssh auth PROVEN ... ED25519 user/host CA keys generated; enableSSHCA on JWK provisioner; 24h root principal cert issued and used to ssh into sectestbed 5104 (passwordless, no static key). Host onboarding = 1 file + reload. Rollout role queued in KNELIAC. Public CA key committed (private keys never leave tsys-ca). https://projects.knownelement.com/issues/385	2026-09-05 17:08:16 -05:00
mrcharles	6e4f794b03	[#800] prod step-ca ACME endpoint LIVE on tsys-ca (fleet-root chain); http-01 validation fetch open ... compose.yaml: host networking (bridge+embedded-DNS broke rooted-name lookups), :8443 via ca.json address, image digest-pinned; init-stepca.sh: scaffold + ECDSA-P256 intermediate signed by /root/ca-root fleet root (verified), ACME provisioner, managed password. Directory serving RFC8555 on tailnet. OPEN: step-ca validation GET fails instantly with zero dial attempts (authz says could-not-connect) — bisected caps, read_only, bridge vs host, container DNS. Debug continues next run (GODEBUG=netdns=2 + strace plan). https://projects.knownelement.com/issues/800	2026-09-05 09:35:25 -05:00
mrcharles	525ade2908	[#697] point questions file at Redmine (model retired) ... https://projects.knownelement.com/issues/697	2026-09-05 05:33:18 -05:00