cottonbeckfield/python-csr

Generate a CSR/Key via Python

python-csr's Issues

runtime error, TypeError: initializer for ctype 'char *' must be a bytes or list or tuple, not str

python ./csrgen35.py host.domain.com -s host2.domain.com
Enter your Country Name (2 letter code) [US]: US
Enter your State or Province []:California: Maryland
Enter your (Locality Name (eg, city) []:San Francisco: Rockville
Enter your Organization Name (eg, company) []:FTW Enterprise: TestCompany
Enter your Organizational Unit (eg, section) []:IT: IT
Traceback (most recent call last):
File "./csrgen35.py", line 142, in
generateCSR(hostname,sans)
File "./csrgen35.py", line 82, in generateCSR
san_constraint = crypto.X509Extension(b"subjectAltName", False, ss)
File "/Library/Frameworks/Python.framework/Versions/3.6/lib/python3.6/site-packages/OpenSSL/crypto.py", line 775, in init
extension = _lib.X509V3_EXT_nconf(_ffi.NULL, ctx, type_name, value)
TypeError: initializer for ctype 'char *' must be a bytes or list or tuple, not str

Python 3 Support

Hello! I needed a script for this and bumped into your code.

I just ported csrgen to Python 3, and added the option to add IP Address SANS to the CSR.

I'd like to create a pull request, but could not create a new branch and push my changes. Can you help me with that?

Thanks!
Diego

Update README.md to show python dependencies

When I tried to run for the first time I got

ImportError: No module named OpenSSL

pip install pyOpenSSL resolved it on Mac OS X,

Perhaps update the README to show python dependencies?

adding custom extension to CSR request

Could you please explain how we could add custom OID extension in this code ?

Looks like program is incomplete

[root@ip-10-0-0-225 python-csr]# ./csr_tools/csrgen.py -f sample.yaml -u csr.yaml
Enter your Common Name (eg, DNS name) [ip-10-0-0-225]:
Traceback (most recent call last):
File "./csr_tools/csrgen.py", line 406, in
main(sys.argv)
File "./csr_tools/csrgen.py", line 395, in main
cert.generateFromFile(args.file)
AttributeError: Certificate instance has no attribute 'generateFromFile'

Improve prompts and handle empty user input in prompts

I think it would be good if the prompts showed example input, similar to the openssl

Enter your country (2 letter code) [US]:

also, if you don't enter something when prompted current the script errors,

OU = raw_input("Enter your organizational unit: ")
...
req.get_subject().organizationalUnitName = OU