search

Azure / AzureKeyVault

R interface to Azure Key Vault
Other
14 stars 7 forks source link

Support for ECC PKs in Azure Key Vault #1

Closed mxwlf closed 5 years ago

mxwlf commented 5 years ago

Trying to upload a certificate to Azure KeyVault. The certificate contains an Elliptic Curve key. Fails clearly stating that ECC is not supported.

Repro steps: 0) Having a Certificate requested with ECC 1) Go to a KeyVault the user has enough privileges to upload certificates to. 2) Go to Settings -> Certificates -> Generate/Import 3) Select Method of Creation: Import. 4) Fill with a valid name 5) Point the uploader control to a valid PFX file and fill with correct password. 6) Click on "Create"

EXPECTED: The certificate should be stored in the KV along with private key.

OBSERVATION: The following error is thrown: CODE BadParameter MESSAGE Something went wrong with the certificate creation. RAW ERROR Elliptic Curve Cryptography Public Key Algorithm of the x509 certificate in the certificate chain is not supported.

Additional info. Certificate CA: https://sectigo.com Intended use: Custom Domain TLS binding for Azure CDN endopoint.

hongooi73 commented 5 years ago

Please note that AzureKeyVault is an R package for interfacing with the Key Vault service; it is otherwise independent of the service itself. If you're having KV problems, you can contact tech support via the Azure Portal.