Re: [OpenXPKI-users] How do I retrieve a Certificates key via RPC-call to http://localhost:8080/rpc/enroll/SearchCertificate
Hi Oliver,
thanks a lot!
Your reference to
"_map_certificate: [% Certificate.pem(...) %]“
… was close and guided me to the right direction, but – big surprise – it
didn’t work.
Finally I found out that the following line works:
“_map_pem: "[% USE Certificate %][% Certificate.pem(context.cert_identifier) %]"
Of cause, I had to adjust the file enroll.yaml appropriately too:
[SearchCertificate]
workflow = certificate_search
param = common_name
output = cert_identifier, pem, notbefore, notafter, status
The result was pretty much what I had been searching for:
curl -s -F "method=SearchCertificate" -F "common_name=Rob Roberts"
http://localhost:8080/rpc/enroll | python -m json.tool
{
"result": {
"data": {
"cert_identifier": "jLy7gIbwwvnvOCMRpTPgdw6uVpg",
"notafter": "2022-03-16T16:54:56",
"notbefore": "2021-09-16T16:54:56",
"pem": "-BEGIN CERTIFICATE-\nm …….. v9MRebfA=\n-END
CERTIFICATE-",
"status": "ISSUED"
},
"id": 0,
"pid": 70,
"proc_state": "finished",
"state": "SUCCESS"
}
}
So far, so good (and once again: thank you for your help!)
What remains open, is my question, how to switch from RPC to REST.
Could you give me a hint, how to achieve that?
Kind regards
Andreas
___
OpenXPKI-users mailing list
OpenXPKI-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openxpki-users
Re: [OpenXPKI-users] How enable Intermediate certificate CRL.
Hello Martin, We have already configured the above mentioned file.But We need to enable CRL for Issuer (Issuer: CN=OpenXPKI Demo Issuing CA 20210917,) this certificate. So that we can verify the intermediate certificate. Please guide us which configuration file need to change. Also we are trying to enable CRL using the below command. # openxpkicmd --realm democa crl_issuance Workflow created (ID: 63743), State: CANCELED But we got a State: CANCELED message. Thanking you, Sanju Kundu On Thu, Sep 23, 2021 at 5:11 PM Martin Bartosch wrote: > > We are able to enable .p12 certificate CRL for certificate revocation. > But we need to enable CRL for intermediate certificates i.e our requirement. > > Screenshots are attached along with mail for more understanding. > > If you are asking where you can configure the CDP in the certificate > profile default: > > > https://github.com/openxpki/openxpki-config/blob/community/config.d/realm.tpl/profile/default.yaml#L93 > > Regards, > > Martin > > ___ OpenXPKI-users mailing list OpenXPKI-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openxpki-users
Re: [OpenXPKI-users] How enable Intermediate certificate CRL.
> We are able to enable .p12 certificate CRL for certificate revocation. But we > need to enable CRL for intermediate certificates i.e our requirement. > Screenshots are attached along with mail for more understanding. If you are asking where you can configure the CDP in the certificate profile default: https://github.com/openxpki/openxpki-config/blob/community/config.d/realm.tpl/profile/default.yaml#L93 Regards, Martin ___ OpenXPKI-users mailing list OpenXPKI-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openxpki-users
Re: [OpenXPKI-users] How enable Intermediate certificate CRL.
> Please guide us to enable Intermediate certificate CRL in the openxpki > environment.We are using openxpki version 3.12 in our environment. I don't understand this question. Regards, Martin ___ OpenXPKI-users mailing list OpenXPKI-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openxpki-users
[OpenXPKI-users] How enable Intermediate certificate CRL.
Hello, Please guide us to enable Intermediate certificate CRL in the openxpki environment.We are using openxpki version 3.12 in our environment. Thanking you, Sanju Kundu ___ OpenXPKI-users mailing list OpenXPKI-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openxpki-users
