[Cryptography-dev] Signing a CSR with your own CA

[Kevin Hughes]

Hey Cryptography Devs,

I am trying to figure how to use pyca/cryptography to sign a CSR with my
own CA and I can't quite see how I am supposed to do this using the
library. I have finished and understood the tutorial for creating a CSR
https://cryptography.io/en/latest/x509/tutorial/#creating-a-certificate-signing-request-csr

I've previously worked through how to do this with raw openssl commands:

openssl x509 \
  -req \
  -in "csr.pem" \
  -CA myCA.pem \
  -CAkey myCA.key \
  -passin "pass:$ca_password" \
  -CAcreateserial \
  -out "crt.pem" \
  -days 1825 \
  -sha256 \
  -extfile "extfile.txt"

I appreciate the help and look forward to using this library

- Kevin
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/cryptography-dev/attachments/20190411/42937569/attachment.html>