Hello!
- Vote on this issue by adding a 馃憤 reaction
- If you want to implement this feature, comment to let us know (we'll work with you on design, scheduling, etc.)
Issue details
Currently it is not possible to perform a rekey using the token authorization flow, unlike a renew. This is most relevant when step-ca is placed behind a layer-7 proxy.
Adding the token authorization flow to the /rekey endpoint would allow for this kind of setup.
Why is this needed?
Renews are less secure than rekeys, since the same key is used forever, instead of changing it with every cert.
Hello!
Issue details
Currently it is not possible to perform a rekey using the token authorization flow, unlike a renew. This is most relevant when step-ca is placed behind a layer-7 proxy.
Adding the token authorization flow to the
/rekeyendpoint would allow for this kind of setup.Why is this needed?
Renews are less secure than rekeys, since the same key is used forever, instead of changing it with every cert.