kms
kms copied to clipboard
Support for Quick Cert functionality ?
Before #101 , a non-KMIP-compliant quick cert functionality existed which would allow the creation of a cert and its chain by supplying minimal infos on the subject names. The keys would use X25519.
After #101 this should be doable with three calls:
-
a
Import
call to import the a PKCS#12 with the issuer private key and cert(s) -
then for every new certificate
- a
CreateKeyPair
call to generate a Key pair - a
Certify
call on the generated Public Key to generate a cert
In my view, this is good enough to emulate the old functionality and has the benefit to be KMIP compliant while offering more flexibility on the encryption algorithms used.
While we make the decision, the "quick cert" code, will be moved to a separate branch
- a
Code available in server/src/certificates/qui_cert in branch 103
Can be closed since this PR https://github.com/Cosmian/kms/pull/248 solve the certificate generation.