vcert icon indicating copy to clipboard operation
vcert copied to clipboard

Send signed certificate to Venafi

Open Saadi6 opened this issue 3 years ago • 2 comments

Is it possible to send a signed certificate with or without private key via vcert? This will ensure certificate is being Monitored actively and notifications sent to contacts defined for the Folder where certificate object will be created in Venafi.

Saadi6 avatar Jun 28 '21 05:06 Saadi6

@Saadi6 that functionality is supported by the VCert client SDK but not currently by the CLI.

tr1ck3r avatar Jun 28 '21 15:06 tr1ck3r

Just adding some info for the future. In order to add the ability to import a certificate in VCert CLI, for TLSPC the CIT alias part of the zone would be ignored since it's only applicable to issuance and for TPP you'd need to support the --nickname parameter to be able to specify the certificate object name if you didn't want to use the CN.

Assuming the auth is done by env variable, the idea would be to have:

vcert import -z "My App\My CIT" --cert-file certificate.pem
vcert import -z "My App\My CIT" --cert-file certificate.pem --key-file privatekey.pem --key-password passw0rd
vcert import -z "My App\My CIT" --file keycert.pem --key-password passw0rd
vcert import -z "My App\My CIT" --file keystore.p12 --key-type pkcs12 --key-password passw0rd
vcert import -z "My App\My CIT" --file keystore.jks --key-type jks --jks-alias example --jks-password newPassw0rd! --key-password passw0rd

luispresuelVenafi avatar Apr 02 '24 17:04 luispresuelVenafi