Skip to content

Missing support for emailAddress as subject for CSR #460

Open
@hesstobi

Description

@hesstobi
  • YubiKey Manager (ykman) version: 4.0.3
  • How was it installed?: choco
  • Operating system and version: Windows 10
  • YubiKey model and version: YubiKey 5 NFC
  • Bug description summary: Unsupported attribute: 'emailAddress'

Steps to reproduce

Create new CSR with ykam for S/MINE

ykman piv keys generate --algorithm ECCP384 --format PEM 9c public.pem
ykman piv certificates request --subject "CN=James Smith,OU=Sales,L=Redwood Shores,O=OpenLDAP,ST=California,C=US,[email protected]" 9c public.pem csr.csr

This will error with Unsupported attribute: 'emailAddress'

Expected result

A CSR with an emailAddress attribute in the subject

Actual results and logs

Error: Unsupported attribute: 'emailAddress'

Other info

I like to use the Yubikey Manager to let users create an CSR for X.509 based certificates to use with S/MINE.
Of cource this needs the emailAddress as attribute in the subject. This is currently not supported by ykman.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions