-
Notifications
You must be signed in to change notification settings - Fork 321
Description
The import of certificates with ECC private key does not work. This can be tested by creating self signed certificates with openssl commands using the following methods. (Official parties looks like to deliver certificates with keys like created with method 1)
method 1:
openssl ecparam -genkey -name secp384r1 -out key1.pem
openssl req -new -x509 -key key1.pem -out cert1.pem -days 3650 -subj "CN=test1"
In the browser to your Lemur site when trying to Import this certificate and key, the key is not valid at all, so the field is red.
method 2:
openssl req -x509 -newkey ec -pkeyopt ec_paramgen_curve:secp384r1 -days 3650 -nodes -keyout key2.pem -out cert2.pem -subj "CN=test2"
In the browser to your Lemur site when trying to Import this certificate and key, the error message is: failed to upload validation error