cert-enroll: certificate checking and enrollment

The cert-enroll script handles the initial enrollment of an X.509
host certificate with a PKI server via the EST or SCEP protocols.

Run as a systemd timer or via a crontab entry the script daily
checks the expiration date of the host certificate. When a given
deadline is reached, the host certificate is automatically renewed
via EST or SCEP re-enrollment based on the possession of the old
private key and the matching certificate.

This commit is contained in:

Andreas Steffen

2023-10-03 08:45:22 +02:00

parent 80e27fe9fd

commit cbfc12b330

16 changed files with 1142 additions and 1 deletions

									
										src/Makefile.am
									
		+4
		
												View File
												
				@@ -142,3 +142,7 @@ endif

				if USE_LIBTPMTSS

				  SUBDIRS += tpm_extendpcr

				endif

				if USE_CERT_ENROLL

				  SUBDIRS += cert-enroll

				endif