README.md

Plumaa Keys

This directory contains the keys for the accounts used in Plumaa tests. Each subfolder requires to be filled with a private.pem and public.pem file, which can be obtained from the test certificates provided by the oficial SAT website, also included within each subfolder for convenience.

The characteristics of these certificates are well outlined in this external documentation..

Quick start

To setup the keys directory, run:

bash scripts/derive_keys.sh

How to generate each private.pem and public.pem file

The tests certificates provided by the SAT are in .cer format. These include the identification information associated to each public key included in the certificate and should've been signed by the SAT certification authority.

Similarly, the private keys of each .cer file are given in .key format. These files are encrypted by a password, which is provided by the SAT in a .txt file.

You'll need both .cer and .key to convert them to .pem using OpenSSL.

Warning

Never use actual private keys here since they'll be stored without encryption. Although the keys are ignored by git, there's a high risk of leaking if such key is kept unencrypted.

For the .cer to a public.pem:

openssl x509 -inform der -in path/to/certificate.cer -pubkey -noout -outform der > public.pem

For the .key to a private.pem:

## NOTE: You'll be prompted for the password here.
openssl rsa -inform der -outform pem -in path/to/private.key -out private.pem