Open wkral opened 9 years ago
Just a note that this is on the list of features we'd like to support (and at some point will work on), but it's a low priority: it's going to be a lot of effort for little payoff for what we're using it for now.
+1
This PR is working towards addressing this issue: https://github.com/cloudflare/cfssl/pull/402
Have there been any updates on this? The linked PR is closed, but I don't see any updates in the wiki: https://github.com/cloudflare/cfssl/wiki/PKCS-%2312-Support-Requirements
Here's the latest opened PR that addresses this issue: https://github.com/cloudflare/cfssl/pull/449
This utility has been great making the keys and signing certs but it doesn't seem oriented towards client certificates, but it's 80% of the way there. It would be useful to be able to generate client keys and sign them with a CA key and then be able to easily package them in a .p12/pfx file that can be installed in browser or used in a client library.