Netflix / lemur

Repository for the Lemur Certificate Manager
Apache License 2.0
1.71k stars 322 forks source link

Additional export certificate options #2100

Open ecterun opened 5 years ago

ecterun commented 5 years ago

The ability to export a certificate without the private key would be helpful. Specifically for certificates that are being generated with CSR's which do not have a private key stored in lemur. The addition of a export option inside of openssl for pkcs8 would be helpful, for these types of situations.

Additionally the option to export a certificate using openssl(pkcs8) with/without both the private key and chain would be nice. This would then be useful for certificates that are not generated via CSR, and do have a stored private key.

castrapel commented 5 years ago

I agree this would be a nice-to-have feature. We currently don't have the cycles to work on this, so I've marked it as help-wanted.

Thank you.