Christina, Thank you so much for the help! :-) Steven From: pki-users-request(a)redhat.com Sent: ‎Tuesday‎, ‎July‎ ‎1‎, ‎2014 ‎11‎:‎00‎ ‎AM To: pki-users(a)redhat.com Send Pki-users mailing list submissions to pki-users(a)redhat.com To subscribe or unsubscribe via the World Wide Web, visit https://www.redhat.com/mailman/listinfo/pki-users or, via email, send a message with subject or body 'help' to pki-users-request(a)redhat.com You can reach the person managing the list at pki-users-owner(a)redhat.com When replying, please edit your Subject line so it is more specific than "Re: Contents of Pki-users digest..." Today's Topics: 1. Re: ECC entity certificate signing and Dogtag (Christina Fu) ---------------------------------------------------------------------- Message: 1 Date: Mon, 30 Jun 2014 11:15:24 -0700 From: Christina Fu <cfu(a)redhat.com&gt; To: pki-users(a)redhat.com Subject: Re: [Pki-users] ECC entity certificate signing and Dogtag Message-ID: <53B1A93C.5090005(a)redhat.com&gt; Content-Type: text/plain; charset="iso-8859-1"; Format="flowed" Hi Steven, NSS softtoken provides ECC on F20 out of box (https://bugzilla.redhat.com/show_bug.cgi?id=1019244 ). During installation, you just want to make sure that you select the right option accordingly. On the client side, the current firefox version supports CRMF key gen with EC. You can try it on one of the enrollment profiles at the EE port. From the CLI, certutil works well. You can do something like the following to get PKCS#10: certutil -d . -R -k ec -q nistp256 -s "CN=test2014" -a -o req.test2014 Christina On 06/27/2014 10:02 AM, sbernst(a)gmail.com wrote: -------------- next part -------------- An HTML attachment was scrubbed... URL: <https://www.redhat.com/archives/pki-users/attachments/20140630/3e54f20f/a... ------------------------------ _______________________________________________ Pki-users mailing list Pki-users(a)redhat.com https://www.redhat.com/mailman/listinfo/pki-users End of Pki-users Digest, Vol 76, Issue 1 ****************************************