70f4a1b190
Rename serial.txt -> ca_serial.txt
2022-04-20 16:45:47 +00:00
9e75968acc
Add revoke command
2022-04-20 16:44:37 +00:00
24522541ad
Start serial from 1, as 0 can't be revoked
2022-04-20 16:11:34 +00:00
7b1e34f625
Refactor: join strings in shell instead of relying on paste
2022-04-20 12:47:40 +00:00
e0bc09679e
- ssh-keygen will fail hard if it doesn't find what it needs, even when
...
quiet
- Don't find "$PATH_PUBKEYS_DIR/" if it doesn't exist
- Retrieve CA comment only inside find, when it's really needed
- Quiet down ssh-keygen in get_ca_sk_comment_from_pk if ca.pub is not
present
2022-04-19 04:05:49 +00:00
06b4ec5354
Tell that .pub is stripped in cassh.1
...
Also fix a small typo introduced in previous commit.
2022-04-19 04:04:54 +00:00
d630c83ade
Make mkfile accept multiple parameters
2022-04-19 03:49:02 +00:00
cfd97ff74d
Rewrite token formatter engine
2022-04-19 03:41:36 +00:00
e7aeadfa32
Rename get_ca_comment_from_sk -> get_ca_sk_comment_from_pk
...
- Better explain what it does
- Don't fallback to public key fingerprint in function
- Use "cassh" as the fallback if the comment is empty
- Adjust manpage
2022-04-19 03:41:36 +00:00
497363b31b
Make serial a simple counter
...
While at it, error out when ssh-keygen fails, not after writing the
serial.
2022-04-19 03:41:28 +00:00
be8e55bb06
Sync usage with reality
2022-04-18 02:51:33 +00:00
36964accdc
Use variables for paths
2022-04-11 23:40:43 +00:00
061f99740f
Add FILES section to cassh.1
...
Adjust a Bl -width and some Pa while there.
2022-04-07 22:04:44 +00:00
b1ae1229f7
Mention that cassh doesn't support revoking certs yet
2022-04-07 21:21:32 +00:00
490d268ba0
Manpages nits
2022-04-07 18:02:15 +00:00
8db9f9c7de
Add a wrapper for using cassh with a keyfile
2022-04-07 15:29:37 +00:00
f8ca9d4974
Remove ENVIRONMENTS and EXAMPLES sections
2022-04-07 15:28:51 +00:00
df3c1b2e2f
No tests yet, sadly
2022-04-07 13:51:07 +00:00
df41cacbba
Initial import
2022-04-07 13:48:50 +00:00
