Skip to content

Add command to issue context-specific x509 auth聽#1509

Open

Description

@MaxwellDPS

Hello!

  • Vote on this issue by adding a 馃憤 reaction
  • If you want to implement this feature, comment to let us know (we'll work with you on design, scheduling, etc.)

Issue details

When using the cli tool it can be useful to set STEP_ADMIN_CERT and STEP_ADMIN_KEY especially when testing.

It would be nice if there was a step command that would do the following steps auto-magically 馃獎

  1. Issue a certificate pair for your own email from authority-admin
  2. Set the STEP_ADMIN_CERT and STEP_ADMIN_KEY

This would be nice if it respected contexts as well as those are a PITA to work around when using the env auth

Why is this needed?

The cert based env auth is super nice to limit re-issuances during testing, something like the command below allowing the user to set the end time on the auth x509. Then automatically using that cert for auth in that context until it expires (or is revoked

step ca login --context <CTX> --provisioner <etc> --valid-until <1h> <etc>

step ca logout --context <CTX> # To wrapper the revoke and undo actions

Activity

  1. changed the title [-]Add command to issue auth x509[/-] [+]Add command to issue context-specific x509 auth[/+] on Oct 29, 2025
  2. self-assigned this
    on Nov 11, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

enhancementneeds triageWaiting for discussion / prioritization by team

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions