Add TODO related to aegis cert.

This commit is contained in:
Eli Ribble 2023-11-06 11:19:42 -07:00
parent 47c40d0ca2
commit 7dcec92bf9
1 changed files with 8 additions and 0 deletions

View File

@ -4,6 +4,14 @@ Tool for producing identities
Anagram of "Gorgon". Anagram of "Gorgon".
## TODO
* Fix up the aegis generation script to ensure that I either have, or don't need, the extensions from Step CA:
* X509v3 Key Usage: critical
* Certificate Sign, CRL Sign
* X509v3 Basic Constraints: critical
* CA:TRUE, pathlen:1
## aegis-generate ## aegis-generate
This generates an initial ID, known as an 'aegis'. It uses [step-ca](https://smallstep.com/docs/step-cli/the-step-command/) defaults which puts the data files in `$HOME/.step`. This generates an initial ID, known as an 'aegis'. It uses [step-ca](https://smallstep.com/docs/step-cli/the-step-command/) defaults which puts the data files in `$HOME/.step`.