Creating CSR

[Alberto]

Hi support team

I`m trying to find out how to create a CSR on HSM6 with function create_public_key_file() , please could help us giving a sample of this with input data ( CN, , OU, …) ?

def zymkey.module.Zymkey.create_public_key_file (
self,
filename,
slot = 0,
foreign = False )
Create a file with the PEM-formatted public key.
This method is useful for generating a Certificate Signing Request.

Thanks

[Bob_of_Zymbit]

To generate a CSR, you don’t need to first export the public key to a file. You can use openssl and include -engine zymkey_ssl to use the Zymkey keys. There is an example you can find here:

Generating a Certificate Signing Request (CSR) Using Zymkey

Zymkey can be used as part of the client side TLS transaction against a server that is configured for mutual authentication. A CSR can be generated using Zymkey. This CSR can be used to generate a certificate from a preferred Certificate Authority or CA (for example: GoDaddy, Comodo or Verisign) or against your own self signed root CA. To generate a CSR with one of Zymkey’s key slots, simply type the following OpenSSL commands on your Raspberry Pi: touch bogus.key openssl req -key bogus.key -…

You can specify an environment variable ZK_SSL_SLOT to openssl with the slot you would like to use.

For example, to use ATTEC slot 2,

ZK_SSL_SLOT=2 openssl req -key bogus.key -new -out myCert.csr -engine zymkey_ssl -keyform e

This is particularly useful with the HSM6 which allows you to generate up to 512 additional key pairs.