Generating KRA Transport CSR with PKI NSS - dogtagpki/pki GitHub Wiki

Generating CSR

To create a certificate request, prepare a certificate extension configuration (e.g. kra_transport.conf):

authorityKeyIdentifier = keyid:always
keyUsage               = critical, digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment
extendedKeyUsage       = clientAuth

Then execute the following command:

$ pki nss-cert-request \
    --subject "CN=DRM Transport Certificate" \
    --ext kra_transport.conf \
    --csr kra_transport.csr

Availability: PKI 10.9

See Also

Tip	To find a page in the Wiki, enter the keywords in search field, press Enter, then click Wikis.

⚠️ GitHub.com Fallback ⚠️