Questions tagged [csr]
A Certificate Signing Request (CSR) is used in a hierarchical PKI to request a new certificate from a Certificate Authority.
68 questions
1 vote
0 answers
52 views
Are ECC CSR always different and if yes, why? [closed]
I've noted that SHA256 of CSRs for RSA keys, generated as openssl req -new -config leaf.conf -key rsa.key rsa.csr are always the same, given the same key and configuration. In the same time, every ...
- 183
0 votes
0 answers
163 views
How to include ChangeSubjectName in CSR?
The RFC - 7030 section 4.2.2, EST protocol, suggests to use the Change Subject Name attribute when the client would like to use a different subject for the new issued certificate during reenrollment. ...
- 21
2 votes
0 answers
182 views
How to retrieve TLS unique value from Apache?
TLS unique value is present in TLS 1.2 version. In Golang, I can get the value of the TLS unique value from the http response through the field TLS. I'd like know how I can get it from Apache. Is ...
- 21
0 votes
1 answer
250 views
How to include TLS-unique value in CSR?
I'm using a GlobalSign EST Go library that provides an implementation of the RFC 7030 (EST). So far doesn't provide any function to generate a CSR at runtime and therefore include the TLS-unique value ...
- 21
-1 votes
2 answers
623 views
What happens to the key pair once the CSR has been enrolled?
I have a key pair which I used to generate a CSR. Once I enrolled that CSR PKCS10, I get from the PKI (or CA) a certificate signed with the PKI private key. From here, I would like to know if my ...
- 21
0 votes
0 answers
149 views
Is a Certificate Signing Request a concatenation of public key and metadata?
From this question, it is said that when creating a CSR, we attach the public key and fill in other data. When creating a CSR, you attach your public key to it and fill in other needed data; you then ...
- 101
0 votes
1 answer
272 views
WebAuthn does not guarantee public-key integrity other than trough attestation?
I've been reading about WebAuthn and try to write some code to exercise. One thing I noticed is that the spec doesn't seem to provide any way to verify the correctness of the public-key being create()'...
- 402
1 vote
1 answer
2k views
How to add additional information to Certificate Signing Request (CSR)?
I would like to generate a Certificate Signing Request (CSR) and add additional custom information in it. The standard CSR fields are common name, country, organization, organizational unit, etc. Is ...
- 21
1 vote
1 answer
232 views
Automatic Certificate Signing Request (CSR) Validation
I was wondering if there are papers or well-known algorithms to automate the validation of a Certificate Signing Request (CSR). Suppose I have a group of trusted services where I expose a "CA ...
- 13
11 votes
3 answers
4k views
Why create a CSR on my own server to have it signed by a 3rd party?
I am looking into our current website certificate-management process and am looking for steps that may be unnecessary and can be simplified. The current process was created by our sysadmin who now ...
- 375
0 votes
1 answer
146 views
Connection problems with common name as domain
I was exploring SAN certs and was able to connect to the machine with domains specified in the SAN fields during CSR creation. But I was unable to connect to the machine with the common name specified ...
- 1
2 votes
2 answers
2k views
What is CA response after giving them the CSR?
I'm trying to understand the logical flow of SSL certificate. Suppose I have a website running on a machine. I generate a CSR file that contains information (e.g. common name, organization, country, .....
- 123
0 votes
2 answers
3k views
Getting fingerprint of certificate signing request
I am aware that I can get the fingerprint of an x509 certificate by typing openssl x509 -in certificate.crt -noout -fingerprint But if I try to get the fingerprint of a CSR (openssl req -in ...
- 151
1 vote
1 answer
2k views
SSL certificate match with private key but doesn't match with CSR
I use the following command to create your private key and CSR (using the ECC algorithm): openssl ecparam -out ECC.key -name prime256v1 -genkey -noout openssl req -new -key ECC.key -out ECC.csr -...
- 37
2 votes
2 answers
580 views
Can any field in a CSR be overwritten in the issued cert?
Let's say you have a CSR that filled with incorrect data and you need to issue a certificate to the associated private key holder. The private key holder will not issue another CSR and will not ...
- 147