generate_csr_from_ssh_host_key

nixfleet_agent::enrollment

Function generate_csr_from_ssh_host_key 

Source 
pub fn generate_csr_from_ssh_host_key(
    hostname: &str,
    ssh_host_key_path: &Path,
) -> Result<(String, [u8; 32])>
Expand description

Builds a CSR signed by the SSH host key; returns (PEM CSR, raw 32-byte pubkey). CP rejects if the pubkey doesn’t match hosts.<hostname>.pubkey. FOOTGUN: SSH key is OpenSSH PEM; rcgen wants PKCS#8 - we rewrap via the proto helper before handing to KeyPair::from_pem.