[Bug 279583] security/step-certificates: support various password-related startup options

From: <bugzilla-noreply_at_freebsd.org>
Date: Sat, 08 Jun 2024 04:26:17 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=279583

            Bug ID: 279583
           Summary: security/step-certificates: support various
                    password-related startup options
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: Individual Port(s)
          Assignee: ports-bugs@FreeBSD.org
          Reporter: bob@vesterman.com
                CC: mw@wipp.bayern
                CC: mw@wipp.bayern
             Flags: maintainer-feedback?(mw@wipp.bayern)

The step-ca server has several different password-related startup command line
options for different purposes, including but perhaps not limited to:

--password-file
--ssh-host-password-file
--ssh-user-password-file
--issuer-password-file
--provisioner-password-file

Of these, the FreeBSD rc.d script only seems to support --password-file. Things
can still *work*, because if a more specific one is missing, it will default to
the value of --password-file (although see note below), but it would be best to
use the more specific ones as appropriate.

NOTE: I'm unfamiliar with --issuer-password-file, and I don't know for sure
that it will default to --password-file like the others do.

Thanks.

-- 
You are receiving this mail because:
You are the assignee for the bug.