The key from file '' is incomplete or inconsistent, when attempting to generate a CSR with an ed25519 key

chris2511 / xca

X Certificate and Key management

http://xca.hohnstaedt.de

Other

1.54k stars 204 forks source link

The key from file '' is incomplete or inconsistent, when attempting to generate a CSR with an ed25519 key #404

Closed daleglass closed 1 year ago

daleglass commented 1 year ago

This is from version 2.4.0, which should support this key type. It works just fine with RSA keys.

tilman19 commented 1 year ago

I sadly get the same error on ED25519 keys when creating a certificate. Using the exact same settings with an RSA key (2048 bits) everything works as expected.

chris2511 commented 1 year ago

Works for me on Windows and Mac OS with XCA 2.4.0. What I did:

Click New Certificate
Apply TLS server extensions
Set common name
Click Generate Key
- Select ED25519
- (Key is successfully generated.)
Click apply
(Certificate is successfully generated)

The key from file '' is incomplete or inconsistent is an error, which is raised during import, but not while signing.

redy01 commented 1 year ago

Same here, I'm using TLS_client template. As I remember it works on Ubuntu 20.04 but not on fedora 38

WalterFaber commented 1 year ago

Same issue here. I can not create new certificates with ed25519 keys.

XCA 2.4.0 OpenSSL 3.0.2 Ubuntu 22.04

Creating a similar certificate using RSA key works perfectly.

Is this fixed in 2.5.0? Is there any workaround?

Thank you in advance for your help.

BTW: I like the fact that this issue has the Git ID 404 (not)!

WalterFaber commented 1 year ago

Is this fixed in 2.5.0?

I can now answer it by myself: yes*

*built latest version according to documentation