Requesting to submit a CSR with pki client-cert-request

pki-bot / pki-issues-final

0 stars 0 forks source link

Requesting to submit a CSR with pki client-cert-request #1704

Closed pki-bot closed 4 years ago

pki-bot commented 4 years ago

This issue was migrated from Pagure Issue #1716. Originally filed by mrniranjan (@mrniranjan) on 2016-01-06 18:37:30:

Closed as Duplicate
Assigned to nobody
Associated bugzillas
- https://bugzilla.redhat.com/show_bug.cgi?id=1295831

Currently to submit a CSR, this can be done through browser, but to submit a CSR through CLI, the current method is to get the profile XML, edit the XML and put the CSR in the XML. This requires editing the XML and hand-crafting it.

Is it possible to add a feature to add support of adding CSR to client-cert-request without editing profile XML?

pki-bot commented 4 years ago

Comment from edewata (@edewata) at 2016-01-06 22:15:32

This is already implemented in ticket 456 in commit ec9c68d68eabff3784fcf6dabf2c6745734b3c9c.

The CSR can be submitted from CLI without an XML file as follows:

$ pki ca-cert-request-submit --profile caUserCert \
 --request-type pkcs10 --csr-file testuser.csr --subject uid=testuser

It's documented here: http://pki.fedoraproject.org/wiki/PKI_Certificate_CLI#Submitting_a_Certificate_Request

There's also ticket 1705 to not require the subject DN parameter.

pki-bot commented 4 years ago

Comment from mrniranjan (@mrniranjan) at 2017-02-27 14:12:06

Metadata Update from @mrniranjan:

Issue set to the milestone: 10.3.0