Re: [Pki-users] Generate certificate for proxy using a PKCS#7 as the CSR

Hi Christina, I'm sorry for the confusion, let's skip the PKCS#7, I read the settings wrong ;) I'm actually trying to generate a certificate that is also an intermediary CA. Which Certificate Profile should best fit that need?

Thanks, Michelle Taggart ----- Original Message ----- From: "Christina Fu"<cfu(a)redhat.com> To: pki-users(a)redhat.com Sent: Monday, July 22, 2013 4:56:16 PM Subject: Re: [Pki-users] Generate certificate for proxy using a PKCS#7 as the CSR Dogtag only supports CSR in the following formats: 1. CRMF 2. PKCS #10 3. CMC with either CRMF or PKCS #10 I am not aware that a CSR can be represented in PKCS #7, but I always keep an open mind to learn new (or old) things, so I'd appreciate it if you can send us a reference link to the RFC that specifies such CSR representation using PKCS #7. If it gives us enough good reasons to support it, we will gladly consider supporting that in the future. Christina On 07/22/2013 11:47 AM, Taggart, Michelle wrote: > Hi, > > I'm working on getting a CSR approved through Dogtag 10.0.3 on Fedora Core 19. The CSR is in PKCS#7 format. I'm using the Manual Certificate Manager Signing Certificate Enrollment form since I need the certificate to be an intermediary CA. After submitting the form, I get an "Sorry, your request has been rejected. The reason is "Request Rejected - {0}" error. Any ideas on what's causing this? > > > > Thanks, > > Michelle Taggart > > _______________________________________________ > Pki-users mailing list > Pki-users(a)redhat.com > https://www.redhat.com/mailman/listinfo/pki-users _______________________________________________ Pki-users mailing list Pki-users(a)redhat.com https://www.redhat.com/mailman/listinfo/pki-users