| Summary: | Simplifying submitting a CSR via CLI | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 7 | Reporter: | Matthew Harmsen <mharmsen> |
| Component: | pki-core | Assignee: | Endi Sukma Dewata <edewata> |
| Status: | CLOSED UPSTREAM | QA Contact: | Asha Akkiangady <aakkiang> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | low | ||
| Version: | 7.3 | CC: | arubin, nkinder |
| Target Milestone: | rc | ||
| Target Release: | 7.4 | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2018-04-19 00:08:37 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
Reopening; I erroneously resolved the upstream ticket (see https://fedorahosted.org/pki/ticket/1705#comment:5) Per CS Bug/Ticket Triage held 04/19/2016: RHEL 7.4 Per RHEL 7.5.z/7.6/8.0 Triage: edewata: close RHEL bug CLOSED UPSTREAM, keep upstream ticket in FUTURE |
Currently when submitting a CSR via CLI the user is still required to specify a request type and a subject DN: {{{ $ pki ca-cert-request-submit \ --profile caUserCert \ --csr-file testuser.csr \ --request-type pkcs10 \ --subject UID=testuser,O=EXAMPLE }}} To improve usability, the CLI should obtain the request type and subject DN from the CSR itself. The server should also obtain the information from the CSR directly. The client may display the request data for confirmation: {{{ $ pki ca-cert-request-submit --profile caUserCert --csr-file testuser.csr Certificate request: Request type : PKCS #10 Subject: UID : testuser Organization : EXAMPLE Key Type : RSA Key Size : 2048 ... Submit certificate request (Y/n)? }}} There should also be an option to skip the confirmation: {{{ $ pki ca-cert-request-submit --profile caUserCert --csr-file testuser.csr -y }}}