Does the step cli command "step certificate sign..." use a provisioner

[pfsysadmin]

I am new to using step-ca and step but I'm impressed by its capabilities and it will be well suited to my requirements. So thank you for the projects.

I have a question regarding signing a csr created by "step certificate create... --csr... ".

I noticed when using "step ca sign..." that you are prompted for the choice of the relevant provisioner then the associated password but when using "step certificate sign..." you are not prompted for this information.

Does "step certificate sign..." use a provisioner? If not, is there another way to have default settings in a file or template?

Thanks

Paul

[tashian]

Hi! Good question.

step certificate sign does not use a remote CA at all. It is only for signing a CSR using a local issuer.
Whereas, step ca sign is for signing via step-ca provisioners.

You can use deaults.json to store default settings for step. See the step documentation for details.

[pfsysadmin]

@tashian,
Thank you for the explanation. I will look into the options to put into defaults.json.

Paul