Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow for reinitialising of the TA cert #1250

Open
wants to merge 6 commits into
base: main
Choose a base branch
from
Open

Allow for reinitialising of the TA cert #1250

wants to merge 6 commits into from

Conversation

Koenvh1
Copy link
Contributor

@Koenvh1 Koenvh1 commented Jan 30, 2025

Previously, once the TA cert was created, there was no way to reinitialise it. That meant that any changes regarding the rsync URI, HTTPS URI, validity, etc. could not be made. This PR adds a --force switch to allow the signer to be created again, provided the same key is used, as well as a convenient reinit shorthand.

koen@beta:~/Code/krill$ target/debug/krillta signer reinit --help
Reinitialise an already initialised signer

Usage: krillta signer reinit [OPTIONS] --proxy-id <path> --proxy-repository-contact <path> --tal-rsync <rsync URI> --private-key-pem <path>

Options:
  -i, --proxy-id <path>                   Path to the proxy ID JSON file
  -r, --proxy-repository-contact <path>   Path to the proxy repository contact JSON file
      --tal-rsync <rsync URI>             The rsync URI used for TA certificate on TAL and AIA
      --tal-https <HTTPS URI>             The HTTPS URI used for the TAL
      --private-key-pem <path>            The private key for the already initialised signer in PEM format
      --initial-manifest-number <number>  Set the manifest number [default: 1]
  -h, --help                              Print help

@Koenvh1 Koenvh1 requested a review from a team January 31, 2025 16:29
@Koenvh1 Koenvh1 marked this pull request as ready for review February 3, 2025 13:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant