Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Import of certificates with ECC private keys does not work #5058

Open
wv2025 opened this issue Jan 9, 2025 · 0 comments
Open

Import of certificates with ECC private keys does not work #5058

wv2025 opened this issue Jan 9, 2025 · 0 comments

Comments

@wv2025
Copy link

wv2025 commented Jan 9, 2025

The import of certificates with ECC private key does not work. This can be tested by creating self signed certificates with openssl commands using the following methods. (Official parties looks like to deliver certificates with keys like created with method 1)
method 1:
openssl ecparam -genkey -name secp384r1 -out key1.pem
openssl req -new -x509 -key key1.pem -out cert1.pem -days 3650 -subj "CN=test1"
In the browser to your Lemur site when trying to Import this certificate and key, the key is not valid at all, so the field is red.

method 2:
openssl req -x509 -newkey ec -pkeyopt ec_paramgen_curve:secp384r1 -days 3650 -nodes -keyout key2.pem -out cert2.pem -subj "CN=test2"
In the browser to your Lemur site when trying to Import this certificate and key, the error message is: failed to upload validation error

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant