Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add more options for CSR request #60

Open
ikuranov opened this issue Sep 5, 2023 · 1 comment
Open

Add more options for CSR request #60

ikuranov opened this issue Sep 5, 2023 · 1 comment

Comments

@ikuranov
Copy link

ikuranov commented Sep 5, 2023

We have 3rd Party Certificate. We used to get only CSR for ECDSA since we do not use Dual Stack option, and it's disabled, but, must be, something changed on the back-end, and now we get RSA+ECDSA CSR by default:

(example)

$ python3 /home/deploy/cli-cps/bin/akamai-cps status --cn '*.XXXXX.com' > /etc/letsencrypt/csr/*.XXXXX.com.csr

Getting enrollment for *.XXXXX.com with enrollment-id: 123456
Getting change status for changeId: 234567

3RD PARTY CERTIFICATE DETAILS:
Below is the CSR for RSA. Please get it signed by your desired certificate authority and then run 'proceed' to upload.

Below is the CSR for ECDSA. Please get it signed by your desired certificate authority and then run 'proceed' to upload.
...............

We need an option for akamai-cps to get only CSR for ECDSA, could you please add it?

@rajiv
Copy link
Member

rajiv commented Sep 5, 2023

If only ECDSA delivery is needed, you can get both the ECDSA and RSA CSRs, then upload only the signed ECDSA certificate. There is no need to upload both the ECDSA signed certificate and the RSA signed certificate. Said another way, you can safely ignore the CSR of the type you do not need. Details are at ECDSA+RSA dual-stack for third-party certificates.

Since you are piping the output to a file, you are winding up with 2 CSRs in that single file, so your request for a way to download just a single CSR makes sense.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

No branches or pull requests

2 participants