pkispawn: certutil options incorrect for creating ecc admin certificate

[pki-bot]

This issue was migrated from Pagure Issue #1524. Originally filed by cfu (@cfu) on 2015-07-29 01:11:25:

• Closed as Fixed
• Assigned to mharmsen (@mharmsen)
• Associated bugzillas
  • https://bugzilla.redhat.com/show_bug.cgi?id=1247801

---

Ran into the following with pkispawn when the system and admin cert are ecc:

pkispawn : ERROR ....... subprocess.CalledProcessError: Command '['certutil', '-R', '-d', '/opt/pki-cfu-ecc3/ca/alias', '-s', 'cn=PKI Administrator,e=caadmin@Example.com,o=pki-cfu-ecc3.org', '-g', 'nistp256', '-z', '/opt/pki-cfu-ecc3/ca/alias/noise', '-f', '/opt/pki-cfu-ecc3/ca/password.conf', '-o', '/opt/pki-cfu-ecc3/ca/alias/admin_pkcs10.bin']' returned non-zero exit status 255!

Two issues I observed: (1) the key type is not specified; by default, if not specified, rsa is assumed; It needs -k ec (2) key curve needs to use "-q" to specify, not "-g" (which is for rsa key size). It needs -q

[pki-bot]

Comment from mharmsen (@mharmsen) at 2015-07-29 05:18:20

Pushed to master:

• f9102b8df60d50e00d2a45915d06837510cfd1aa

[pki-bot]

Comment from mharmsen (@mharmsen) at 2015-08-10 18:48:55

Modified in 10.2.6-4.

[pki-bot]

Comment from cfu (@cfu) at 2017-02-27 14:07:09

Metadata Update from @cfu:

• Issue assigned to mharmsen
• Issue set to the milestone: 10.2.6