Getting template from client

[idan100]

Hi grindsa I would like my clients (acmesh,winacme and cert manager) to transfer the template they want in their request to my acme2certifier pod. I am using the mswcce ca handler, and I saw you can transfer the desired template by the useragent field. Sadly I cannot use this field in order to transfer the template - since I am using it to collect metrics for it's original purpose, the user agent sending the request. I saw in acme.sh that there is the field: "extended-key-usage", which is also getting a string and is more appropriate for passing the template. I was wondering if you could parse this field in order to extract the template name from it and passing it on to Microsoft ADCS. Thanks in advanced!

[grindsa]

Hi,

I had a quick look; I am not sure if --extended-key-usage fits the purpose as:

• it encodes the extended key-attributes in the csr
• only pre-defined values are allowed

The handler could be modified to extract the attributes from the CSR and send the first one as template-name to the CA but as i said; given the above limitation i am not sure if this is enough for your needs.

/G.