Questions tagged [cfssl]
8 questions
2
votes
0 answers
go-grpc return TLS error `unrecognized name`
I want to enable tls mode for go-grpc. But I get a connection error at the check tls step
connection error: desc = "transport: authentication handshake failed: remote error: tls: unrecognized name"
I am trying to create a certificate via cfssl -…
batazor
- 852
- 2
- 16
- 36
1
vote
0 answers
What is the CA configuration file syntax? (ca-config.json)
I can't seem to find the configuration reference for creating a CA with cfssl.
I'm going through k8s the hard way and trying to understand every single step. In this step, he makes a ca-config.json for use with cfssl gencert -initca ca-csr.json. I'd…
j7skov
- 557
- 7
- 22
1
vote
2 answers
Golang panic: interface conversion: interface {} is nil, not string
I have tried to create CA configuration file, certificate and private key, I am using cfssl command in go and try to simulate same command from
cfssl gencert -initca ca-csr.json | cfssljson -bare ca
Here is my code snipped
package main
import (
…
Bora Özkan
- 73
- 1
- 1
- 8
0
votes
1 answer
Encrypt a file with a x509 certificate with cfssl and openssl
Noob question:
Given a x509 certificate created with cfssl:
server.pem
server-key.pem
issued by
ca.pem
Usages for server.pem are:
"server": {
...
"usages": [ "signing", "key encipherment", "server auth", "data encipherment", "s/mime" ]
…
Manel R. Doménech
- 3
- 1
- 1
0
votes
1 answer
Can I use ssh-keygen and cfssl interchangeably for ssh login?
It's slightly embarrassing to ask this, but here it goes: What's the difference between generating public/private keys via ssh-keygen and cfssl?
I've successfully used ssh-keygen to create pub/private key credentials that can be used to ssh into a…
Tim Crowley
- 355
- 4
- 10
0
votes
0 answers
cfssl failed to compile on windows using cygwin
I try to download and compile (which is done automatically) from here, and getting this error:
C:\Dev\devops\vault>go get -v -u github.com/cloudflare/cfssl/cmd/cfssl
github.com/cloudflare/cfssl…
user63898
- 29,839
- 85
- 272
- 514
0
votes
1 answer
What kind of certificates do I need for configuring an image registry?
I'm working on creating a local image registry for an OKD installation by following along with this Medium article which assumes the creation of
the self-sign CA, server certificate with both the short and fully
qualified hostname of this VM
It…
Blake Simmons
- 426
- 1
- 8
- 23
0
votes
1 answer
Nginx proxy to CFSS Connection refused
I have CFSSL service running in kubernetes on port 8888. I can access it API's from another pod directly referring cfssl:8888. I want to expose it via Nginx and I have Nginx running in separate pod with following config
upstream cfssl {
server…
roy
- 6,344
- 24
- 92
- 174