5 Commits

Author SHA1 Message Date
Volodymyr Khoroz
1cf5a72794 Feature: support multiple root CA certificates
This is needed to support the root CA renewal feature.
During the initial phase of that renewal, a server needs to send clients:
- A new root CA,
- A cross-signed copy of that new CA, so that clients can validate the chain of trust using a previous root CA,
- And a previous root CA, so that clients can still trust the existing server TLS certificates during interregnum.

Signed-off-by: Volodymyr Khoroz <volodymyr.khoroz@foundries.io>
2024-06-17 19:26:56 +03:00
Andy Doan
ad98f72bf9 Abstract logic for looking up Service instance
When we run in a multi-tenant mode, the http handlers must be able to
dynamically look up which est service instance to use based on the
server name.

Signed-off-by: Andy Doan <andy@foundries.io>
2022-10-19 09:30:21 -05:00
Andy Doan
10e4577582 Introduce http handler for "simplereenroll"
Signed-off-by: Andy Doan <andy@foundries.io>
2022-10-10 16:37:31 -05:00
Andy Doan
cadc9b54c4 Introduce http handler for "simpleenroll"
Signed-off-by: Andy Doan <andy@foundries.io>
2022-10-10 16:36:57 -05:00
Andy Doan
c05be17eb7 Introduce HTTP skeleton
Signed-off-by: Andy Doan <andy@foundries.io>
2022-10-10 16:36:57 -05:00