yubikey-ca/yubikey-ca-java/README.md

ENV:

• CARD_CLI - Card cli command or full path, default card-cli
• SIGN_REQUEST_SLOT - Sign request slot, default 82

Generate Keypair

$ java -jar yubikey-ca-java.jar --generate-keypair --keypair-type secp256r1

Issue ROOT CA

$ java -jar yubikey-ca-java.jar --generate-root-ca \
       --sign-slot 88 --subject 'CN=Hatter Yubikey EC Root CA' \
       --pin ****** \
       [--add-to-remote]

Issue Intermediate CA

$ java -jar yubikey-ca-java.jar --generate-intermediate-ca \
       --sign-slot 88 --subject 'CN=Hatter Yubikey EC Intermediate CA' \
       --cert-slot 89 --root-ca-id 39 \
       --pin ****** \
       [--add-to-remote]