* Change issuingCertificateURL and crlDistributionPoints format
* Patch leaf_data.tpl to fix formatting issue
Remove square brackets from leaf_data.tpl template file.
* Update provisioners with x509 template data
Added a patch for updating provisioners with template data.
* Patch for step-ca.sh
Patch for making $STD happy (/usr/bin/step is a symlink to /usr/bin/step-cli)
* Refactor step-ca installation script
Refactor step-ca installation script to improve configuration and template handling.
- Carve out step-ca-admin.sh
- Patch for making $STD happy (/usr/bin/step is a symlink to /usr/bin/step-cli)
- Define enhanced x509 CA and Certificate Templates
- Configure CA Provisioners, DB and CRL settings
- Generate Root CA Certificate and Key
- Validity: 219168h (~25 Years)
- maxPathLen: 1 (Root -> Intermediate -> Leaf) => Only one Intermediate CA allowed below Root CA
- Active revocation on Intermediate CA and Leaf Certificates by the usage of build-in Certificate Revocation List (CRL)
- Generate Intermediate CA Certificate Bundle and Key
- Validity: 175368h (~20 Years)
- maxPathLen: 0 (Root -> Intermediate -> Leaf) => Intermediate CA is only allowed to issue Leaf Certificates
- Active revocation on Leaf Certificates by the usage of build-in Certificate Revocation List (CRL)
- Bundle: Certificate Chain (including Root CA Certificate)
* Update source URL in step-ca.sh script
* Update default version from 12 to 13
Upgrade ESPHome to Debian 13
* Change apt-get to apt for installing git
Upgrade ESPHome to Debian 13
* Update version from 12 to 13 in esphome.json
Upgrade ESPHome to Debian 13
Joerg HeinemannandGitHub
