Skip to content

add support for providing an own ca#602

Open
bochi wants to merge 1 commit into
theforeman:masterfrom
bochi:custom-ca-source
Open

add support for providing an own ca#602
bochi wants to merge 1 commit into
theforeman:masterfrom
bochi:custom-ca-source

Conversation

@bochi

@bochi bochi commented Jun 26, 2026

Copy link
Copy Markdown
Contributor

Why are you introducing these changes? (Problem description, related links)

Foremanctl should be able to handle user supplied CAs for signing certificates

partly fixes #297

What are the changes introduced in this pull request?

  • New certificate source custom_ca: imports a supplied CA and uses it to sign certificates
  • New command line parameters --certificate-ca-certificate, --certificate-ca-key,
    --certificate-ca-key-password
  • In case the CA is unencrypted it will be reencrypted so it looks like a generated one to the system, some tools like candlepin seem to want an encrypted CA and doing it differently would introduce many non-trivial changes

How to test this pull request

Steps to reproduce:

  • Create a CA
  • Deploy with the command line options above

Checklist

  • Tests added/updated (if applicable)
  • Documentation updated (if applicable)

@bochi bochi force-pushed the custom-ca-source branch from 0f21df0 to 0ace162 Compare June 26, 2026 09:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Certificate workflow support

1 participant