Comodo Helper

[Erinn Looney-Triggs]

Folks I am developing a helper to make calls against the Comodo CA. There are a number of things I am confused by, mostly the Comodo API which seems to be... less than great.

Anyway, I need to have a config file to hold state for the Comodo API, it hold the user, password, URL for the WSDL etc. Is there a recommended place for a config file like this?

I'll probably have more questions as I move along, but that is it for now.

Thanks,
-Erinn

[Erinn Looney-Triggs]

Replying to myself, and really really hoping I am not talking to myself here.

Is there a way to put in defaults for things in the 'subject' field so certutil -s? For example we would like  things like OU and O to be standard, saves typing too, but I can't seem to find a way to do this, any suggestions would be great.

Thanks,
-Erinn

[Fraser Tweedale]

On Mon, Sep 11, 2017 at 06:36:26PM -0000, Erinn Looney-Triggs wrote:
> Replying to myself, and really really hoping I am not talking to myself here.
>
> Is there a way to put in defaults for things in the 'subject' field so certutil -s? For example we would like  things like OU and O to be standard, saves typing too, but I can't seem to find a way to do this, any suggestions would be great.

I don't think there is.  certutil(1) is part of NSS anyhow, not
Certmonger.

There are plenty of good libraries for building certs / CSRs in a
variety of languages, if you want to automate (parts of) the
process or streamline things for your users.

Cheers,
Fraser
> Thanks,
> -Erinn
> _______________________________________________
> certmonger-devel mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]

[Erinn Looney-Triggs]

Yeah sorry I meant to say getcert instead of certutil.

[Fraser Tweedale]

On Wed, Sep 13, 2017 at 12:40:09AM -0000, Erinn Looney-Triggs wrote:
> Yeah sorry I meant to say getcert instead of certutil.

OK, no worries.

So it's the same situation for Certmonger.  The CLI tools do not
have any way to default subject DN attributes, but there is a D-Bus
API for creating and managing requests so you can build a front-end
that suits your requirements, in any langauge you like.

Cheers,
Fraser