Inlcude challenge password attribute if required by EST server

globalsign / est

An implementation of the Enrollment over Secure Transport (EST) certificate enrollment protocol

MIT License

42 stars 25 forks source link

Inlcude challenge password attribute if required by EST server #34

Closed mobe1 closed 4 months ago

mobe1 commented 5 months ago

The changes introduced come after an issue/feature request has been opened. They allow us to enroll a CSR that includes the TLS-unique value as recommended by the RFC 7030

Because each http client instantiation results in a new TLS-unique, one way of including it would be to make EST requests from the same http client.
Because the standard crypto/x509 Go package does not handle the challenge password attribute (OID) the way an EST/CA server expects it, the CSR creation had to be wrapped.

mobe1 commented 5 months ago

There has been a git branch filter command applied which accounts for all git history commits being displayed...

mobe1 commented 4 months ago

PR is closed : once the PR is "clean" enough, new PR will be created.

toddgaunt-gs commented 4 months ago

Thank you for the contribution, yes a cleaner version would be great :)!