cloudflare / cloudflare/cfssl

gencert does not add cert to database, but sign does

Open
#1,104 0 comments 1 reaction 0 assignees View on GitHub
Dominant language
Go
Stars
9.5k
Forks
1.2k
PR merge metrics
No merged PRs in 30d

Description

Maybe I am missing something, but I was wondering...
When I create a CSR and get it signed with the sign cli command the certificate is stored in the database (so the db connection seems to work)...but when I create a certificate/key using gencert it is not added to the database so revocation will be impossible.

I saw that there is an API endpoint "certadd" which stores a cert in the database. Is this the workaround for this problem?

Is there a way to call gencert and let cfssl store the cert in the db automatically without invoking the API?
Is there some logic I don't get why a certificate created like this is not stored in the db?

Thanks,
Thomas

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.