Gen additional Client Certs

[nolech]

I didn't see in the documentation how to generate another client cert after the CA and server cert were already created. Is this possible?

[lukebakken]

This isn't currently supported, but is possible. Basically the existing data would have to be preserved. We'd be happy to review a pull request that implements this feature.

[pawel-marciniak]

Can anyone provide some help on that?

[lukebakken]

@nolech @pawel-marciniak please test my branch here:

https://github.com/lukebakken/tls-gen/tree/lrb-gen-client-cert-only

In the basic profile, you can use the following command to create additional client certs using a specific common name:

make CN=client-name-2 gen-client

Look for the files in result/, they will have CN as part of the name.

[pawel-marciniak]

@lukebakken Great, thanks a lot :) I will definitely give it a try today.

[tasoss]

Hello.
I suppose this hasn't been implemented yet.Right?
Is it still ok to use the given solution?

[lukebakken]

I'm waiting for someone else to test the changes I made on the lrb-gen-client-cert-only branch.

[mihaj]

Hi, @lukebakken. I can test the changes. Can you create a PR? It looks like your repo is not available.

[lukebakken]

@mihaj you're in luck. I managed to find a clone with the branch. See #31. It needs to have conflicts resolved which I don't have time to do today.

[mihaj]

Cool, let me check If I can resolve that.