README

makecsr

This is a small helper used to generate a CSR from a private key hosted in HSM. It's used particularly to issue the CS and AMO intermediates used by autograph.

For more information, see https://mana.mozilla.org/wiki/pages/viewpage.action?pageId=87365053

Expand ▾ Collapse ▴

Documentation

Overview

    This code requires a configuration file to initialize the crypto11 library. Use the following config in a file named "crypto11.config"

    {
    "Path" : "/opt/cloudhsm/lib/libcloudhsm_pkcs11.so",
    "TokenLabel": "cavium",
    "Pin" : "$CRYPTO_USER:$PASSWORD"
    }
    

    This code requires a configuration file to initialize the crypto11 library. Use the following config in a file named "crypto11.config"

    {
    "Path" : "/opt/cloudhsm/lib/libcloudhsm_pkcs11.so",
    "TokenLabel": "cavium",
    "Pin" : "$CRYPTO_USER:$PASSWORD"
    }