Allow signing of intermediate CA

[derveloper]

This commit removes the check if the certificate has the CA flag. This is possible because step-ca supports signing CAs.

Name of feature:

Allow signing of CAs

Pain or issue this feature alleviates:

Signing certificates with CA flag

Why is this important to the project (if not answered above):

more step-ca features are usable

Supporting links/other PRs/issues:

Closes #9

💔Thank you!

[CLAassistant]

All committers have signed the CLA.

[maraino]

Hi @derveloper, the change looks good. Can I ask you for a use case for this?

And I'm assuming you're aware that for this to work, you will need a particular configuration of step-ca, on the template and the intermediate.

You can do clever things in the template, but in most cases, you would want to use two different issuers, one for leaves and one for intermediates.

[derveloper]

Thanks for your response!

Can I ask you for a use case for this?

Of course, my use case is, creating a CA for linkerd-identity. I want to have the certificate provisioned via StepIssuer, this enables me to keep the definition of the certificate in my git repo.

And I'm assuming you're aware that for this to work, you will need a particular configuration of step-ca, on the template and the intermediate.

I am, I've tested the PR and have configured a additional JWK provisioner in step-ca.

[maraino]

Thanks for responding. I'll merge right away.

[maraino]

@derveloper I've released a new version of the docker image and the helm chart.

[derveloper]

Thanks for the merge, very much appreciated that I don't need to maintain my fork 😄