cert-request can only handle PEM-encoded PKCS #10 CSR. Trying to request with a DER file causes a string decoding error:
% ipa cert-request --principal alice alicereq.der ipa: ERROR: UnicodeDecodeError: 'utf8' codec can't decode byte 0x82 in position 1: invalid start byte Traceback (most recent call last): File "/usr/lib/python2.7/site-packages/ipalib/cli.py", line 1345, in run sys.exit(api.Backend.cli.run(argv)) File "/usr/lib/python2.7/site-packages/ipalib/cli.py", line 1103, in run kw = self.process_keyword_arguments(cmd, kw) File "/usr/lib/python2.7/site-packages/ipalib/cli.py", line 1091, in process_keyword_arguments self.load_files(cmd, kw) File "/usr/lib/python2.7/site-packages/ipalib/cli.py", line 1305, in load_files kw[p.name] = self.Backend.textui.decode(raw) File "/usr/lib/python2.7/site-packages/ipalib/cli.py", line 140, in decode return value.decode(encoding) File "/usr/lib64/python2.7/encodings/utf_8.py", line 16, in decode return codecs.utf_8_decode(input, errors, True) UnicodeDecodeError: 'utf8' codec can't decode byte 0x82 in position 1: invalid start byte ipa: ERROR: an internal error has occurred
DER-encoded CSRs should be supported.
Dup of https://fedorahosted.org/freeipa/ticket/3741
Metadata Update from @ftweedal: - Issue assigned to someone - Issue set to the milestone: 0.0 NEEDS_TRIAGE
Login to comment on this ticket.