[rs-users] mo_csr - how to send a csr over website

[Frank Leprich]

Hey Graham,

I think the wildcard works, because the response includes the whole csr.
But I think getting further due to studying the mod_csr source.
I am a linux admin with pki experience, not a c developer :)
Anyway, I hope to run the redwax projekt properly.

I configured this now:

<IfModule mod_csr.c>
   <Location /csr>
     SetHandler csr
     # use subject from the certificate sign request unmodified
     #CsrSubjectRequest *
     CsrSubjectRequest CN
     CsrParamPkcs10 csr
   </Location>
</IfModule>

So the send <textarea name="csr" rows="30" cols="64"></textarea> gives:

Bad Request
Your browser sent a request that this server could not understand.
Disk: mod_ca frontend did not supply a transaction ID, it is required

How do I have to activate transaction ID ?

Regards,
Frank

Am 2021-05-24 16:59, schrieb Graham Leggett:
> On 24 May 2021, at 13:12, Frank Leprich via rs-users 
> <rs-users at redwax.eu> wrote:
> 
>> I am trying to send a csr against the mod_csr over a website.
>> I can not figure out the right textarea name like "subject-*" (nid).
>> 
>> my form:
>> <form action="http://localhost/csr" method="post">
>> <input type="hidden" name="pkcs10" id="pkcs10" value="" />
>> <textarea name="subject-CN" rows="30" cols="64"></textarea>
>> <input type="submit">
>> </form>
> 
>> <IfModule mod_csr.c>
>>  <Location /csr>
>>    SetHandler csr
>>    # use subject from the certificate sign request unmodified
>>    CsrSubjectRequest *
>>  </Location>
>> </IfModule>
> 
> Can you confirm what happens if you specify an exact value rather than
> a wildcard, like this:
> 
> CsrSubjectRequest CN
> 
> In other words, after sending "subject-CN” in your form, does it get 
> picked up?
> 
> I suspect the wildcard is not doing what it is supposed to.
> 
> Regards,
> Graham
> —