A zero trust swiss army knife for working with X509, OAuth, JWT, OATH OTP,
etc.
Out of the box; step uses ECDSA. We've bundled templates to generate RSA infrastructure.
step certificate create "Example Root CA" \
$(step path)/certs/root_ca.crt \
$(step path)/secrets/root_ca_key \
--template /usr/share/step/templates/rsa_root_ca.tpl \
--kty RSA \
--not-after 87660h \
--size 3072
step certificate create "Example Intermediate CA" \
$(step path)/certs/intermediate_ca.crt \
$(step path)/secrets/intermediate_ca_key \
--ca $(step path)/certs/root_ca.crt \
--ca-key $(step path)/secrets/root_ca_key \
--template /usr/share/step/templates/rsa_intermediate_ca.tpl \
--kty RSA \
--not-after 87660h \
--size 3072
|