makecsr

README

makecsr

This is a small helper used to generate a CSR from a private key hosted in HSM. It's used particularly to issue the CS and AMO intermediates used by autograph.

For more information, see https://mana.mozilla.org/wiki/pages/viewpage.action?pageId=87365053

Documentation

Overview

This code requires a configuration file to initialize the crypto11 library. Use the following config in a file named "crypto11.config"

{
"Path" : "/opt/cloudhsm/lib/libcloudhsm_pkcs11.so",
"TokenLabel": "cavium",
"Pin" : "$CRYPTO_USER:$PASSWORD"
}

This code requires a configuration file to initialize the crypto11 library. Use the following config in a file named "crypto11.config"

{
"Path" : "/opt/cloudhsm/lib/libcloudhsm_pkcs11.so",
"TokenLabel": "cavium",
"Pin" : "$CRYPTO_USER:$PASSWORD"
}