31 lines
690 B
Markdown
31 lines
690 B
Markdown
ENV:
|
|
|
|
* CARD_CLI - Card cli command or full path, default `card-cli`
|
|
* SIGN_REQUEST_SLOT - Sign request slot, default `82`
|
|
|
|
# Generate Keypair
|
|
|
|
```shell
|
|
$ java -jar yubikey-ca-java.jar --generate-keypair --keypair-type secp256r1
|
|
```
|
|
|
|
# Issue ROOT CA
|
|
|
|
```shell
|
|
$ java -jar yubikey-ca-java.jar --generate-root-ca \
|
|
--sign-slot 88 --subject 'CN=Hatter Yubikey EC Root CA' \
|
|
--pin ****** \
|
|
[--add-to-remote]
|
|
```
|
|
|
|
# Issue Intermediate CA
|
|
|
|
```shell
|
|
$ java -jar yubikey-ca-java.jar --generate-intermediate-ca \
|
|
--sign-slot 88 --subject 'CN=Hatter Yubikey EC Intermediate CA' \
|
|
--cert-slot 89 --root-ca-id 39 \
|
|
--pin ****** \
|
|
[--add-to-remote]
|
|
```
|
|
|