Keyfactor / ejbca-vault-pki-engine

EJBCA PKI Engine and Backend for HashiCorp Vault. Used to issue, sign, and revoke certificates using the EJBCA CA.
Apache License 2.0
6 stars 2 forks source link

Add role option for how username is created in EJBCA #2

Closed svenska-primekey closed 6 months ago

svenska-primekey commented 1 year ago

Currently the plugin generates a random username in EJBCA. This should be configurable to assert the CN value as the username that way if the CA has enforce unique DN enabled the same certificate can be requested for renewal and would be done against the entity in EJBCA with that same username matching the CN.

One cannot renew a certificate with this plugin unless Enforce Unique DN is disabled on the CA.