Re: [Cryptography-dev] Signing a CSR with your own CA

2019-04-11 Thread Alex Gaynor
Hi Kevin, The short version is, despite what the OpenSSL CLI would have you think, "signing a CSR" isn't a thing. When a CA receives a CSR, it copies some of the elements (most importantly the public key) from the CSR into a new cert. https://cryptography.io/en/latest/x509/tutorial/#creating-a-sel

[Cryptography-dev] Signing a CSR with your own CA

2019-04-11 Thread Kevin Hughes
Hey Cryptography Devs, I am trying to figure how to use pyca/cryptography to sign a CSR with my own CA and I can't quite see how I am supposed to do this using the library. I have finished and understood the tutorial for creating a CSR https://cryptography.io/en/latest/x509/tutorial/#creating-a-ce