Re: [OpenXPKI-users] Allow additional Elliptic Curves

Hi, > I have created a csr using the elliptic curve secp256k1. When I copy this csr > in the web interface and try to request a certificate, I get this error: > "Used key parameter is not allowed by policy (curve_name: 1.3.132.0.10)" > > When I do the exact same thing but using the curve

Re: [OpenXPKI-users] EST Endpoint / RFC 7030

Hi, > For authenticated EST the OpenXPKI documentation says: Use the UI to obtain a > TLS Client certificate with the application name *pkiclient* > > I don't understand in which field of the X.509 certficate should the > "application name" go. Our default configuration ships with the

[OpenXPKI-users] Allow additional Elliptic Curves

Hello I have a default installation on Debian 12 with the democa I have created a csr using the elliptic curve secp256k1. When I copy this csr in the web interface and try to request a certificate, I get this error: "Used key parameter is not allowed by policy (curve_name: 1.3.132.0.10)" When

[OpenXPKI-users] EST Endpoint / RFC 7030

For authenticated EST the OpenXPKI documentation says: Use the UI to obtain a TLS Client certificate with the application name *pkiclient* I don't understand in which field of the X.509 certficate should the "application name" go. -- Wolfram Wadepohl Plattform Technology Storopack