rob thijssen
bc389dfc7c
Replace the step CLI shell-out with direct step-ca API calls: - Fetch provisioner config and encrypted JWK key from /1.0/provisioners - Decrypt PBES2-HS256+A128KW JWE with AES key unwrap (RFC 3394) - Create ES256 JWT one-time token with CSR subject, SANs, and SHA - POST CSR + OTT to /1.0/sign Also fixes CSR reuse to validate CN matches before reusing a pending CSR, and auto-discovers iLO 4 (Hp) vs iLO 5 (Hpe) action URLs from the HttpsCert endpoint. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
16 lines
421 B
TOML
16 lines
421 B
TOML
[package]
|
|
name = "cichlid"
|
|
version = "0.1.0"
|
|
edition = "2024"
|
|
|
|
[dependencies]
|
|
base64 = "0.22"
|
|
clap = { workspace = true, features = ["derive"] }
|
|
openssl = { workspace = true }
|
|
reqwest = { workspace = true }
|
|
serde = { workspace = true, features = ["derive"] }
|
|
serde_json = { workspace = true }
|
|
tokio = { workspace = true, features = ["full"] }
|
|
tracing = { workspace = true }
|
|
uuid = { workspace = true, features = ["v4"] }
|