From mboxrd@z Thu Jan 1 00:00:00 1970 MIME-Version: 1.0 In-Reply-To: References: Date: Sat, 23 May 2015 18:40:27 +0200 Message-ID: From: David du Colombier <0intro@gmail.com> To: Fans of the OS Plan 9 from Bell Labs <9fans@9fans.net> Content-Type: text/plain; charset=UTF-8 Subject: Re: [9fans] How do I get a CSR CA's like? Topicbox-Message-UUID: 54a6aa1e-ead9-11e9-9d60-3106f5b1d025 Personnaly, I don't have auth/rsa2csr, but I generate the certificate request from Linux using OpenSSL: $ openssl req -newkey rsa:2048 -days 730 -keyout key.pem -out csr.pem -subj "/C=FR/ST=Paris/L=Paris/CN=9grid.fr" -nodes Then, I convert the key from PEM to DER format: $ openssl rsa -in key.pem -inform PEM -out key.der -outform DER Then, I get the certificate from the CA and copy it to Plan 9: % cp crt.pem /sys/lib/tls/cert.pem Finally, I import the DER key to factotum: % auth/asn12rsa -t 'proto=rsa service=tls owner=*' key.der >key % ramfs -p % cd /tmp % auth/secstore -g factotum % cat key >>factotum % auth/secstore -p factotum % cat factotum | read -m >/mnt/factotum/ctl -- David du Colombier