Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Server-side Key Gen : How to pass CSR from ./estclient -y option ? #105

Open
devan555 opened this issue Nov 26, 2021 · 0 comments
Open

Server-side Key Gen : How to pass CSR from ./estclient -y option ? #105

devan555 opened this issue Nov 26, 2021 · 0 comments

Comments

@devan555
Copy link

Hello Team,
I am trying the server-side keygen option from libest client to libest server
It works fine when I pass common name in the request.
./estclient -v -q -s 127.0.0.1 -p 8085 -o /tmp -u estuser -h estpwd -x /key-x-x.pem --common-name client02

I need to pass csr as the input, in rfc7030 I can see, it can support csr also as the input.

I tried below command
./estclient -v -q -s 127.0.0.1 -p 8085 -u estuser -h estpwd -o /tmp -y /enrollment.csr -x /enrollment.key
and getting the error Error:

The -x option (private key for CSR) does not make sense with a pre-defined CSR

When I tried without private key
./estclient -v -q -s 127.0.0.1 -p 8085 -u estuser -h estpwd -o /tmp -y /enrollment.csr
It says

Server-side key generation and simple enrollment without server-defined attributes failed with code 4 (EST_ERR_NO_KEY)

How I can pass csr for server-side key keygen ? Can anyone help me on that?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant