🟣request

Generate a Certificate Signing Request (CSR). A private key must already be present in the corresponding key slot.

ykman piv certificates request OPTIONS SLOT PUBLIC-KEY CSR

Options	Description
-h, --help	Show this message and exit.
-a, --hash-algorithm [SHA1|SHA256|SHA384|SHA512]	Hash algorithm. [default: SHA256]
-P, --pin TEXT	PIN code.
-s, --subject TEXT	Subject for requested certificate, an RFC 4514 string. [Required]

Arguments	Description
CSR	File to write CSR to. Use '-' to use stdout.
PUBLIC-KEY	File containing a public key. Use '-' to use stdin.
SLOT	PIV slot of the certificate.

HELP

Help Command

Usage: ykman.exe piv certificates request [OPTIONS] SLOT PUBLIC-KEY CSR

  Generate a Certificate Signing Request (CSR).

  A private key must already be present in the corresponding key slot.

  SLOT        PIV slot of the certificate.
  PUBLIC-KEY  File containing a public key. Use '-' to use stdin.
  CSR         File to write CSR to. Use '-' to use stdout.

Options:
  -P, --pin TEXT                  PIN code.
  -s, --subject TEXT              Subject for the requested certificate, as an RFC 4514 string.  [required]
  -a, --hash-algorithm [SHA1|SHA256|SHA384|SHA512]
                                  Hash algorithm.  [default: SHA256]
  -h, --help                      Show this message and exit.

EXAMPLE

example 1