Initial sign endpoint working

server/lib/createUserAccountOrg.ts

@@ -19,6 +19,8 @@ import { FeatureId, limitsService, sandboxLimitSet } from "@server/lib/billing";
 import { createCustomer } from "#dynamic/lib/billing";
 import { usageService } from "@server/lib/billing/usageService";
 import config from "@server/lib/config";
+import { generateCA } from "@server/private/lib/sshCA";
+import { encrypt } from "@server/lib/crypto";
 
 export async function createUserAccountOrg(
     userId: string,
@@ -79,6 +81,11 @@ export async function createUserAccountOrg(
 
         const utilitySubnet = config.getRawConfig().orgs.utility_subnet_group;
 
+        // Generate SSH CA keys for the org
+        const ca = generateCA(`${orgId}-ca`);
+        const encryptionKey = config.getRawConfig().server.secret!;
+        const encryptedCaPrivateKey = encrypt(ca.privateKeyPem, encryptionKey);
+
         const newOrg = await trx
             .insert(orgs)
             .values({
@@ -87,7 +94,9 @@ export async function createUserAccountOrg(
                 // subnet
                 subnet: "100.90.128.0/24", // TODO: this should not be hardcoded - or can it be the same in all orgs?
                 utilitySubnet: utilitySubnet,
-                createdAt: new Date().toISOString()
+                createdAt: new Date().toISOString(),
+                sshCaPrivateKey: encryptedCaPrivateKey,
+                sshCaPublicKey: ca.publicKeyOpenSSH
             })
             .returning();