Collaborate Disseminate
The RFC – 7030 section 4.2.2, EST protocol, suggests to use the Change Subject Name attribute when the client would like to use a different subject for the new issued certificate during reenrollment.
There are two things
I can’t use the O… Continue reading How to include ChangeSubjectName in CSR?
TLS unique value is present in TLS 1.2 version.
In Golang, I can get the value of the TLS unique value from the http response through the field TLS.
I’d like know how I can get it from Apache.
Is there an environment variable that already … Continue reading How to retrieve TLS unique value from Apache?
I’m using a GlobalSign EST Go library that provides an implementation of the RFC 7030 (EST).
So far doesn’t provide any function to generate a CSR at runtime and therefore include the TLS-unique value in the CSR before enrolment.
I might u… Continue reading How to include TLS-unique value in CSR?
I have a key pair which I used to generate a CSR.
Once I enrolled that CSR PKCS10, I get from the PKI (or CA) a certificate signed with the PKI private key.
From here, I would like to know if my private key is useful in any way in regards … Continue reading What happens to the key pair once the CSR has been enrolled?