cloudflare / cloudflare/cfssl

Unable to sing CSR using the PKCS11 module

Open
#1,234 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
9.5k
Forks
1.2k
PR merge metrics
No merged PRs in 30d

Description

Hello, i am trying to sing a csr using the PKCS11 module, so my command looks like this:

```
cfssl sign -ca=/root/cfssl-pkcs11-ca/cacert.pem \
-pkcs11-module="/usr/lib/x86_64-linux-gnu/opensc-pkcs11.so" \
-pkcs11-label="SmartCard-HSM (UserPIN)" \
-pkcs11-token="0" -pkcs11-pin="123456" \
-config="/etc/cfssl/conf/ca-config.json" \
-profile="intermediate-ca" ca.csr > some_file
```
It gives me this error:
`flag provided but not defined: -pkcs11-module`
The above information about the HSM is correctly and the module is the right one.
Anyone got any ideea how should i do this?

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.