#5735 cert-request cannot handle DER-encoded CSR
Closed: Duplicate None Opened 8 years ago by ftweedal.

cert-request can only handle PEM-encoded PKCS #10 CSR. Trying
to request with a DER file causes a string decoding error:

% ipa cert-request --principal alice alicereq.der 
ipa: ERROR: UnicodeDecodeError: 'utf8' codec can't decode byte 0x82 in position 1: invalid start byte
Traceback (most recent call last):
  File "/usr/lib/python2.7/site-packages/ipalib/cli.py", line 1345, in run
    sys.exit(api.Backend.cli.run(argv))
  File "/usr/lib/python2.7/site-packages/ipalib/cli.py", line 1103, in run
    kw = self.process_keyword_arguments(cmd, kw)
  File "/usr/lib/python2.7/site-packages/ipalib/cli.py", line 1091, in process_keyword_arguments
    self.load_files(cmd, kw)
  File "/usr/lib/python2.7/site-packages/ipalib/cli.py", line 1305, in load_files
    kw[p.name] = self.Backend.textui.decode(raw)
  File "/usr/lib/python2.7/site-packages/ipalib/cli.py", line 140, in decode
    return value.decode(encoding)
  File "/usr/lib64/python2.7/encodings/utf_8.py", line 16, in decode
    return codecs.utf_8_decode(input, errors, True)
UnicodeDecodeError: 'utf8' codec can't decode byte 0x82 in position 1: invalid start byte
ipa: ERROR: an internal error has occurred

DER-encoded CSRs should be supported.


Metadata Update from @ftweedal:
- Issue assigned to someone
- Issue set to the milestone: 0.0 NEEDS_TRIAGE

7 years ago

Login to comment on this ticket.

Metadata