Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow to send CSR to privacyIDEA #44

Closed
cornelinux opened this issue Apr 13, 2020 · 0 comments · Fixed by #47
Closed

Allow to send CSR to privacyIDEA #44

cornelinux opened this issue Apr 13, 2020 · 0 comments · Fixed by #47
Assignees

Comments

@cornelinux
Copy link
Member

cornelinux commented Apr 13, 2020

It should be possible to create certificate tokens on privacyIDEA by sending a CSR to privacyIDEA in the parameter --request.

These are the paramters taken by the /token/init endpoint for certificates:

       type=certificate
       user=cornelius
       realm=realm1
       request=<PEM encoded request>
       ca=<name of the ca connector>

The tool would be called like this:

privacyidea -U https://localhost --nosslcheck -a super token init --type certificate \ 
                   --request <pem> --ca <myCA>

Alternatively the CSR could be read from a file:

privacyidea -U https://localhost --nosslcheck -a super token init --type certificate \
                   --requestfile <pem-file> --ca <myCA>
@cornelinux cornelinux added this to the 3.0 smartcards milestone Apr 13, 2020
@cornelinux cornelinux self-assigned this Apr 13, 2020
cornelinux added a commit that referenced this issue Apr 13, 2020
A CSR can be sent to privacyIDEA to enroll certificates.

Closes #44
cornelinux added a commit that referenced this issue Apr 14, 2020
The click framework is a new framework for command line
interfaces. We use a file for each command in
the commands/ directory to keep things easier to manage.

We add a new command section "certificate" - although it
is a tokentype, but this makes creating certificates, CSRs...
easier.

Closes #45
Closes #44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
1 participant