ezgh private-ca ca <command>The project’s private certificate authorities.
A root CA (--type root) is self-signed and signs only subordinate CAs. A subordinate is signed by a CA in the project (--parent) or by your own existing root (--external: download its CSR with ca csr, have your root sign it, then ca import the chain). Certificates are issued from an active subordinate: from a CSR, from a key EZGH generates, or through its ACME directory with a binding.
Part of ezgh private-ca.
Flags
This command also takes the global flags.
Subcommands
| Command | Description |
|---|---|
ezgh private-ca ca create |
Create a certificate authority |
ezgh private-ca ca csr |
Print an external subordinate’s CSR, for your root to sign |
ezgh private-ca ca delete |
Schedule a certificate authority’s deletion |
ezgh private-ca ca disable |
Stop a certificate authority signing |
ezgh private-ca ca enable |
Let a disabled certificate authority sign again |
ezgh private-ca ca get |
Show a certificate authority |
ezgh private-ca ca import |
Import an external subordinate’s signed certificate |
ezgh private-ca ca issue |
Issue a certificate from a CSR or a generated key |
ezgh private-ca ca list |
List the project’s certificate authorities |
ezgh private-ca ca renew |
Reissue a certificate authority’s certificate for the same key |
ezgh private-ca ca restore |
Cancel a certificate authority’s scheduled deletion |
ezgh private-ca ca revoke |
Revoke a subordinate certificate authority |
ezgh private-ca ca update |
Rename a certificate authority, or shorten its longest certificate |