Skip to content

Add ability to set challenge password in mbedtls_x509write_csr #4886

@yachoor

Description

@yachoor

Suggested enhancement

There's no way to set additional attributes in CSR, only extensions.
I need to generate CSR with challenge password (PKCS#9 OID 1.2.840.113549.1.9.7).
Right now I have custom serialization to DER to add that attribute, but all fields of mbedtls_x509write_csr are private in 3.0.

Justification

I need it for certificate enrollment/renewal using SCEP

Metadata

Metadata

Assignees

No one assigned

    Labels

    component-x509enhancementhelp-wantedThis issue is not being actively worked on, but PRs welcome.size-mEstimated task size: medium (~1w)

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions