Re: [Ejbca-develop] ejbca.sh keybind gencsr and key alias

[Michael S. <mi...@st...>]

Michael Ströder wrote:
> I'm using
> 
>   ejbca.sh cryptotoken generatekey \
>     --token "${CT_NAME}" \
>     --alias "${KEY_ALIAS}" \
>     --keyspec 2048 \
>     --verbose
> 
>   ejbca.sh keybind gencsr \
>     --name "${KB_NAME}" \
>     -f "${CSR_FILE_NAME}" \
>     --verbose
> 
> to generate the next key pair and CSR for an OCSP key binding.
> This creates a new key alias in the given crypto token in the same way the
> admin UI does when hitting the button for generating a new key for an OCSP key
> binding.

I guess this has to be used before gencsr:

ejbca.sh keybind modify --nextkeypair

Ciao, Michael.