|
From: Tomas G. <to...@pr...> - 2014-06-25 13:00:02
|
Why do you want to generate a key pair and a CSR on the server side? Just to send the CSR to the CA again and get a certificate? That is unneeded roundtrips. Simply set keystore type to PEM, P12 or JKS, and you will get a key pair and a certificates generated on the server. Cheers, Tomas On 2014-06-25 14:54, Viktor Massalogin wrote: > Hi! > > I'm trying to use EjbcaWS to enroll certificates. > Currently I generate a keypair and CSR on client side and call > certificateRequest command (EndEntity's tokenType is "USERGENERATED"). > Am I right that there are no way to generate a keypair and CSR on server > side (via EjbcaWS)? > (How I got, all "cert request" commands (certificateRequest, > pkcs10Request,..) need a CSR as an argument, but I see no command to > generate a CSR) > Does this also mean that only "USERGENERATED" tokenType (no "PEM" etc) > is allowed for enrollment via EjbcaWS? > > Viktor > > > ------------------------------------------------------------------------------ > Open source business process management suite built on Java and Eclipse > Turn processes into business applications with Bonita BPM Community Edition > Quickly connect people, data, and systems into organized workflows > Winner of BOSSIE, CODIE, OW2 and Gartner awards > http://p.sf.net/sfu/Bonitasoft > > > > _______________________________________________ > Ejbca-develop mailing list > Ejb...@li... > https://lists.sourceforge.net/lists/listinfo/ejbca-develop > |