Re: [OpenXPKI-users] Cannot generate a new certificate from external csr

2024-05-07 Thread James B. Byrne via OpenXPKI-users
On Tue, May 7, 2024 10:02, Oliver Welter wrote: > Hi James, > > the default workflows disallow reusing a private key which is pretty > much what the message tries to tell you, the location where this key is > already used should be visible from the WebUI. > > This behaviour can only be changed by m

Re: [OpenXPKI-users] Cannot generate a new certificate from external csr

2024-05-07 Thread Oliver Welter
Hi James, the default workflows disallow reusing a private key which is pretty much what the message tries to tell you, the location where this key is already used should be visible from the WebUI. This behaviour can only be changed by modifing the workflows as we consider this an elemental

Re: [OpenXPKI-users] Cannot generate a new certificate from external csr

2024-05-07 Thread Martin Bartosch via OpenXPKI-users
James, > I generated a new csr from the private key: > > openssl req -new -key 2016002C.key -out 2016002C_20240507.csr No, you regenerated the same CSR from the same private key. > When I paste the entire .csr into openxpki webui I get this error: > > > The uploaded key was found to be used a

[OpenXPKI-users] Cannot generate a new certificate from external csr

2024-05-07 Thread James B. Byrne via OpenXPKI-users
I have an existing host with an existing private key: 2016002C.key I generated a new csr from the private key: openssl req -new -key 2016002C.key -out 2016002C_20240507.csr head -5 2016002C_20240507.csr -BEGIN CERTIFICATE REQUEST- MIIFLDCCAxQCAQAwgcExCzAJBgNVBAYTAkNBMRAwDgYDVQQIDAdPbnRhc