Creating CSR

[Bob_of_Zymbit]

To generate a CSR, you don’t need to first export the public key to a file. You can use openssl and include -engine zymkey_ssl to use the Zymkey keys. There is an example you can find here:

Generating a Certificate Signing Request (CSR) Using Zymkey

Zymkey can be used as part of the client side TLS transaction against a server that is configured for mutual authentication. A CSR can be generated using Zymkey. This CSR can be used to generate a certificate from a preferred Certificate Authority or CA (for example: GoDaddy, Comodo or Verisign) or against your own self signed root CA. To generate a CSR with one of Zymkey’s key slots, simply type the following OpenSSL commands on your Raspberry Pi: touch bogus.key openssl req -key bogus.key -…

You can specify an environment variable ZK_SSL_SLOT to openssl with the slot you would like to use.

For example, to use ATTEC slot 2,

ZK_SSL_SLOT=2 openssl req -key bogus.key -new -out myCert.csr -engine zymkey_ssl -keyform e

This is particularly useful with the HSM6 which allows you to generate up to 512 additional key pairs.