pfsense-api icon indicating copy to clipboard operation
pfsense-api copied to clipboard

Ability to sign a CSR using api.

Open devatnull opened this issue 2 years ago • 2 comments

Is your feature request related to existing pfSense functionality that is missing from the API? Please describe. Can not sign a CSR using the api.

Is your feature request related to a problem? Please describe. No.

Describe the solution you'd like I would like to sign a CSR.

Describe alternatives you've considered Implementing methods to createcert function would be fine i believe.(user must know the CA refid first.)

Additional context

curl --location --request POST 'https://192.168.124.2/api/v1/system/certificate' \
--header 'Content-Type: application/json' \
--header 'Accept: application/json' \
--header 'Authorization: Basic YasdasdaWasdIzasdasdasdh' \
--data-raw '{
  "method": "sign",
  "descr": "FreeIPA CSR",
  "catosignwith": "$CA_REFID",
  "csrtosign": "new",
  "csrpaste:": "$CSR",
  "csrsign_lifetime": 10,
  "csrsign_digest_alg": "sha256",
  "import_type": "x509",
  "pkcs12_cert": "(binary)",
  "csr_keylen": 2048,
  "csr_ecname": "prime256v1",
  "csr_digest_alg": "sha256",
  "type": "server"
}'

Output:

{
  "status": "bad request",
  "code": 400,
  "return": 1032,
  "message": "Unsupported certificate management method specified",
  "data": []
}

devatnull avatar Jun 23 '22 23:06 devatnull