From pascal.jakobi at gmail.com Wed Apr 8 14:08:09 2020 From: pascal.jakobi at gmail.com (Pascal Jakobi) Date: Wed, 8 Apr 2020 16:08:09 +0200 Subject: [Pki-users] Submitting a Certificate Request or CSR file by using CA Rest API In-Reply-To: <20200306005330.GC251527@T470s> References: <20200306005330.GC251527@T470s> Message-ID: <77f954d3-640b-c055-df25-0dcbe6639c6c@gmail.com> Fraser We are conscious that we can use ca-cert-request to send a csr towards the CA. But we want to avoid this. Our use case is to have a csr generated with openssl, then be able to send it to the CA with a simple curl/HTTP POST for further validation (we have cases where installing the pki-tools rpm is not doable). If this is possible, what is the target URI that should be used (you can point me to a some documentation if I missed some) ? Thanks again P Le 06/03/2020 ? 01:53, Fraser Tweedale a ?crit?: > On Thu, Mar 05, 2020 at 02:19:51PM +0100, Amaury SIHARATH wrote: >> Hello, >> >> I'm still a beginner and looking into Dogtak PKI recently. I wanted if it >> was possible to submit a Certificate Request or a CSR File to the CA by >> using a curl POST command with the CA Rest API, is the feature still up and >> running ? As it is implied by the documentation ? >> > Yes, you can do that. Let us know if you get stuck and we can help. > > Cheers, > Fraser > >> Best regards, >> >> Amaury SIHARATH. >> _______________________________________________ >> Pki-users mailing list >> Pki-users at redhat.com >> https://www.redhat.com/mailman/listinfo/pki-users > _______________________________________________ > Pki-users mailing list > Pki-users at redhat.com > https://www.redhat.com/mailman/listinfo/pki-users > From ftweedal at redhat.com Thu Apr 9 11:27:43 2020 From: ftweedal at redhat.com (Fraser Tweedale) Date: Thu, 9 Apr 2020 21:27:43 +1000 Subject: [Pki-users] Submitting a Certificate Request or CSR file by using CA Rest API In-Reply-To: <77f954d3-640b-c055-df25-0dcbe6639c6c@gmail.com> References: <20200306005330.GC251527@T470s> <77f954d3-640b-c055-df25-0dcbe6639c6c@gmail.com> Message-ID: <20200409112743.GQ251527@T470s> On Wed, Apr 08, 2020 at 04:08:09PM +0200, Pascal Jakobi wrote: > Fraser > > We are conscious that we can use ca-cert-request to send a csr towards the > CA. > > But we want to avoid this. > > Our use case is to have a csr generated with openssl, then be able to send > it to the CA with a simple curl/HTTP POST for further validation (we have > cases where installing the pki-tools rpm is not doable). > > If this is possible, what is the target URI that should be used (you can > point me to a some documentation if I missed some) ? > > Thanks again > > P > Sure, POST to /ca/rest/certrequests The body shall be an XML document such as: {profile} certReqInputImpl pkcs10 {req} Where {profile} is replaced with the profile ID you want to use to issue the certificate, and {req} is replaced with the PEM-encoded PKCS #10 CSR. REST API doc is here: https://www.dogtagpki.org/wiki/CA_REST_API. In several cases (including for submitting certificate requests) there are just links to Java source files where payload data are specified. Cheers, Fraser > > Le 06/03/2020 ? 01:53, Fraser Tweedale a ?crit?: > > On Thu, Mar 05, 2020 at 02:19:51PM +0100, Amaury SIHARATH wrote: > > > Hello, > > > > > > I'm still a beginner and looking into Dogtak PKI recently. I wanted if it > > > was possible to submit a Certificate Request or a CSR File to the CA by > > > using a curl POST command with the CA Rest API, is the feature still up and > > > running ? As it is implied by the documentation ? > > > > > Yes, you can do that. Let us know if you get stuck and we can help. > > > > Cheers, > > Fraser > > > > > Best regards, > > > > > > Amaury SIHARATH. > > > _______________________________________________ > > > Pki-users mailing list > > > Pki-users at redhat.com > > > https://www.redhat.com/mailman/listinfo/pki-users > > _______________________________________________ > > Pki-users mailing list > > Pki-users at redhat.com > > https://www.redhat.com/mailman/listinfo/pki-users > > > > > _______________________________________________ > Pki-users mailing list > Pki-users at redhat.com > https://www.redhat.com/mailman/listinfo/pki-users From ricardoalx.perez at gmail.com Thu Apr 30 14:58:05 2020 From: ricardoalx.perez at gmail.com (Alexander) Date: Thu, 30 Apr 2020 09:58:05 -0500 Subject: [Pki-users] =?utf-8?q?Translate_Dogtag_Certif=C3=ADcate_System?= Message-ID: Hi, it?s possible translate Dogtag Certificate System? How i can contribute to do this? -------------- next part -------------- An HTML attachment was scrubbed... URL: