-
Notifications
You must be signed in to change notification settings - Fork 6
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add support for creating attestation object #36
Conversation
Attestation objects can be used to resolve ACME device-attest-01 challenges.
cmd/attest.go
Outdated
An attestation object can be used to resolve an ACME device-attest-01 challenge. | ||
To pass this challenge the client needs to show prove of possession of a private | ||
key by signing the ACME key authorization, the format is defined by RFC 8555 as | ||
a string that concatenates the token for the challenge with a key fingerprint | ||
separated by a "." character: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
An attestation object can be used to resolve an ACME device-attest-01 challenge. | |
To pass this challenge the client needs to show prove of possession of a private | |
key by signing the ACME key authorization, the format is defined by RFC 8555 as | |
a string that concatenates the token for the challenge with a key fingerprint | |
separated by a "." character: | |
An attestation object can be used to resolve an ACME device-attest-01 challenge. | |
To pass this challenge, the client needs proof possession of a private | |
key by signing the ACME key authorization. The format is defined in RFC 8555 as | |
a string that concatenates the challenge token with the ACME account key fingerprint | |
separated by a "." character: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Fixed with b7db7c8
I did approve it, but I think the command may be doing too many different things; may be too smart with just flags. More explicit might be better. Don't have better suggestions at the moment, though. Given that the plugin is still considered beta, I think we're good if we need to break the command later, so let's keep it like this for now? |
Description
This PR adds support to creating attestation objects, this can be used to resolve ACME device-attest-01 challenges.