Skip to main content

Module simpleenroll

Module simpleenroll 

Source
Expand description

POST /.well-known/est/simpleenroll — Simple Enrollment.

RFC 7030 §4.2: EST clients submit a PKCS#10 CSR to request a new certificate. The client authenticates via mTLS or OTP (HTTP Basic).

The server validates the CSR, forwards it to the CA backend for certificate issuance, and returns the issued certificate in a PKCS#7 certs-only response.

Functions§

parse_pkcs11_object_label
Extract the object (key label) from a PKCS#11 URI.
post_simpleenroll
POST /.well-known/est/simpleenroll