Summary

Using the PKI ACME feature in VyOS works well but for more security and getting certificates from our Openbao server, we want to enable EAB

As I understand VyOS uses certbot which has the flags for EAB --eab-kid <id> --eab-hmac-key <hmac-key> the set commands could be something like;

set pki certificate <cert name>  acme eab-kid '<id>' 
set pki certificate <cert name>  acme eab-hmac '<hmac-key>'

these would then use the --eab-kid and --eab-hmac-key flags on the certbot command but there probably should be some checks to make sure both are set.

We are currently using latest 1.4 LTS but wouldn't mind this in later version we can upgrade to.