creditkudos/eidas

:satellite: :wrench: Tools for reading and creating eIDAS certificate signing requests

eidas's Issues

QC Statements are not correct

QCStatements generated by the program is not correct:

For GB-FCA PSP_PI,PSP_AI it should be (According to OB "Issue: 2.2")

DER:306e3013060604008e4601063009060704008e4601060330570606040081982702304d302630110607040081982701020c065053505f504930110607040081982701030c065053505f41490c1b46696e616e6369616c20436f6e6475637420417574686f726974790c0647422d464341

But it is generating

DER:306c3013060604008e4601063009060704008e4601060330550606040081982702304b302430220607040081982701020c065053505f50490607040081982701030c065053505f41490c1b46696e616e6369616c20436f6e6475637420417574686f726974790c0647422d464341

I feel like all of the QC Statements are not correct. Practically speaking issue i have i am able to upload this certificate to open banking directory but unable to associate it to the statement. Could be something to do with this.

OpenSSL eIDAS PSD2 Certificate Signing Request Profiles Issue 2_2.pdf

How to self sign csr preserving qcStatements

Hi,
first of all thank you for this project, which really helped me.
While csr generated with your tool contains qcStatements, when I try to generate from it a self-signed certificate those extensions are not copied into the certificate.
openssl x509 -req -days 3650 -in out.csr -signkey out.key -out out.crt
Is there a way to self-sign it preserving eidas extensions?

Change analysis - eIDAS profile 1.2.1 and 1.3

ETSI v1.2.1
ETSI v1.3

Created an online version

Morning,
Thanks for the inspiration. I have created an online version at https://eidascsr.darkedges.com/ for my learning and development.

Just thought I would share it with you.

Regards
Nicholas Irving

OBWAC and OBSeal support

Support open banking TEST eIDAS framework certificates and seals.

This must be done as an intermediary step before eIDAS rollout in September

Could not upload OBWAC and OBSEAL in open banking

I am trying to generate a csr file using the config file for openbanking in openssl in windows10 .
In newer openssl version OID 2.5.4.97 is reserved for organizationIdentifier, so you can change your obwac.conf by removing the OID and it should work.
with OID we are unable to generate the csr file.so by removing the OID i m able to generate the csr file.But as OID is a mandatory in the CSR the openbanking is not accepting the certificate.Can some one help??