Skip to content

Commit

Permalink
doc: update ACME PKI issuer documentation for authority ID support
Browse files Browse the repository at this point in the history
Fixes: #4902

Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
  • Loading branch information
abbra authored and fmarco76 committed Nov 21, 2024
1 parent ae7b3c2 commit 2547014
Showing 1 changed file with 15 additions and 0 deletions.
15 changes: 15 additions & 0 deletions docs/installation/acme/Configuring-ACME-with-PKI-Issuer.adoc
Original file line number Diff line number Diff line change
Expand Up @@ -40,6 +40,21 @@ To use client certificate authentication, specify the client certificate nicknam
To use basic authentication, specify the username in the *username* parameter
and the password in the *password* parameter.

## Configuring CA authority

PKI issuer can direct ACME enrollment requests to the specific CA authority.
The authority can be specified either by using its ID or LDAP DN as part of the
`issuer.conf` with `authority-id` or `authority-dn` parameters. These
parameters can also be added with the following command:

----
$ pki-server acme-issuer-mod --type pki \
-Dauthority-id=some-ID
----

By default PKI issuer does not pass any authority ID or LDAP DN, meaning the
request would be handled by the main CA.

## See Also

* link:Configuring_ACME_Issuer.md[Configuring ACME Issuer]

0 comments on commit 2547014

Please sign in to comment.