JSON format documentation

[fbis251]

Hi,

I am looking for the documentation regarding the CSR and config JSON formats.

At the moment, a few examples of JSON files are provided in the README and Wiki but I cannot find information about all the supported keys/values for each type of JSON file that cfssl supports for configuration.

Thanks.

[loganmzz]

No update ?

[elmorti]

cfssl print-defaults will yield this information

root@864e4f594e7b:~# cfssl print-defaults list
Default configurations are available for:
        csr
        config
root@864e4f594e7b:~# cfssl print-defaults csr
{
    "CN": "example.net",
    "hosts": [
        "example.net",
        "www.example.net"
    ],
    "key": {
        "algo": "ecdsa",
        "size": 256
    },
    "names": [
        {
            "C": "US",
            "ST": "CA",
            "L": "San Francisco"
        }
    ]
}

root@864e4f594e7b:~# cfssl print-defaults config
{
    "signing": {
        "default": {
            "expiry": "168h"
        },
        "profiles": {
            "www": {
                "expiry": "8760h",
                "usages": [
                    "signing",
                    "key encipherment",
                    "server auth"
                ]
            },
            "client": {
                "expiry": "8760h",
                "usages": [
                    "signing",
                    "key encipherment",
                    "client auth"
                ]
            }
        }
    }
}

[MorningMartin1997]

Are these all the fields available in the json config files? I don't think so.
We need a more precise documentation on each type of json config files and key/value pairs available in each of them.

cfssl print-defaults will yield this information

root@864e4f594e7b:~# cfssl print-defaults list
Default configurations are available for:
        csr
        config
root@864e4f594e7b:~# cfssl print-defaults csr
{
    "CN": "example.net",
    "hosts": [
        "example.net",
        "www.example.net"
    ],
    "key": {
        "algo": "ecdsa",
        "size": 256
    },
    "names": [
        {
            "C": "US",
            "ST": "CA",
            "L": "San Francisco"
        }
    ]
}

root@864e4f594e7b:~# cfssl print-defaults config
{
    "signing": {
        "default": {
            "expiry": "168h"
        },
        "profiles": {
            "www": {
                "expiry": "8760h",
                "usages": [
                    "signing",
                    "key encipherment",
                    "server auth"
                ]
            },
            "client": {
                "expiry": "8760h",
                "usages": [
                    "signing",
                    "key encipherment",
                    "client auth"
                ]
            }
        }
    }
}