Commit Graph
3 Commits
Author SHA1 Message Date
mrcharles 01197dd761 [#385] SSH CA live on fleet step-ca: user cert issuance + e2e ssh auth PROVEN
ci / audit (push) Failing after 39s
ED25519 user/host CA keys generated; enableSSHCA on JWK provisioner;
24h root principal cert issued and used to ssh into sectestbed 5104
(passwordless, no static key). Host onboarding = 1 file + reload.
Rollout role queued in KNELIAC. Public CA key committed (private keys
never leave tsys-ca).
https://projects.knownelement.com/issues/385
2026-09-05 17:08:16 -05:00
mrcharles d2541647f2 [#800] ACME e2e proof: IP-identifier issuance validated on sectestbed 5104
ci / audit (push) Failing after 54s
http-01 validation, issuance, and chain all verified against the fleet
root via the prod endpoint; 5104 shut back down after the test.
https://projects.knownelement.com/issues/800
2026-09-05 10:16:30 -05:00
mrcharles d923b5f34b [#800] ACME prod runbook: endpoint usage + http-01 root-cause debug log
ci / audit (push) Failing after 1m1s
https://projects.knownelement.com/issues/800
2026-09-05 10:06:35 -05:00