cfssl

cfssl copied to clipboard

Due to this issue https://github.com/cloudflare/cfssl/issues/604 the provided example did not work. authority_key_id needs to be lower case and without colon

jryberg

## Problem Currently, `cfssljson` doesn't provide any way to write the separate `key`, `certificate`, `csr`, and `bundle` files in a specific folder. This is inconvenient if we want to output...

eddyzags

Document allowed_extensions

7

I'm trying to create certificates with ‘oid:1.2.3.4.5.5’ for use with https://floragunn.com/searchguard/. Following their keytool example in https://github.com/floragunncom/search-guard-ssl/blob/5cd934e076a1273b21d8db0fec0e60e9207eada7/example-pki-scripts/gen_node_cert.sh#L37 I end ut with a certificate with the following (not including hosts and...

martin-a-o

The documentation in `/doc/api/` are good but not detailed enough. For instance; - It is not clear which parameters will be in the path, which ones will be in the...

zbalkan

now we have PKI server could generate and sign a new cert with key usage "timestamping", then how about writing a custom HTTP Timestamp server. It should follow [RFC 3161](http://www.ietf.org/rfc/rfc3161.txt)...

kmahyyg

cfssl gencert fails on generation from json (v 1.2)

1

[cfssl][1] v 1.2 cfssl gencert -initca ca/ca-csr.json where the json is: { "hosts": [ "cluster.local" ], "key": { "algo": "rsa", "size": 2048 }, "names": [ { "C": "CA", "L": "Montreal",...

Sergey80

Flag to not fail the revocation status when multiple CRL distribution points having same CRL.

3

**Problem**:There are cases when there is same CRL hosted at multiple locations for high availability. Some if the URLs(CRL Distribution points) may not be reachable. In this case, it is...

Yogi1994

Would it be possible to use cfssl to get a certificate chain presented by a remote server? I was expecting it to be available when using `certinfo` (e.g. `cfssl certinfo...

danielskowronski

Every time you run `cfssl -help` or just `cfssl` the list of available commands is in random order. This fact, combined with lack of man page and wiki page outlining...

danielskowronski

CRL Generation: Adding AKI parameter to command

1

# Background I use cfssl mainly as a command line tool to manage a small PKI with mostly long running certificates. One Root CA and multiple Signing CAs are used...

jcoeltjen