-
Notifications
You must be signed in to change notification settings - Fork 137
Issuing KRA Storage Certificate with PKI NSS
Endi S. Dewata edited this page Dec 15, 2020
·
1 revision
To issue a certificate, prepare a certificate extension configuration in a file (e.g. kra_storage.conf):
authorityKeyIdentifier = keyid:always keyUsage = critical, digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment extendedKeyUsage = clientAuth
To issue a certificate signed by a CA certificate, specify the CA certificate nickname:
$ pki nss-cert-issue \ --issuer ca_signing \ --csr kra_storage.csr \ --ext kra_storage.conf \ --cert kra_storage.crt
Availability: PKI 10.9
Tip
|
To find a page in the Wiki, enter the keywords in search field, press Enter, then click Wikis. |