gencert does not add cert to database, but sign does
Open
- Dominant language
- Go
- Stars
- 9.5k
- Forks
- 1.2k
- PR merge metrics
- No merged PRs in 30d
Description
Maybe I am missing something, but I was wondering...
When I create a CSR and get it signed with the sign cli command the certificate is stored in the database (so the db connection seems to work)...but when I create a certificate/key using gencert it is not added to the database so revocation will be impossible.
I saw that there is an API endpoint "certadd" which stores a cert in the database. Is this the workaround for this problem?
Is there a way to call gencert and let cfssl store the cert in the db automatically without invoking the API?
Is there some logic I don't get why a certificate created like this is not stored in the db?
Thanks,
Thomas
Contributor guide
Assessment
This issue has not been assessed yet.