Comments on Integration of CFSSL with the Lemur Certificate Manager

This tutorial shows the integration of CFSSL with the Lemur certificate Manager. In the previous article on Lemur certificate manager, we have not used any third party root Certification Authority (CA) for the client certificates. Therefore, in this tutorial, PKI will be set up using CFSSL (Cloudflare's SSL) and integrated with the Lemur project.

2 Comment(s)

Add comment

Please register in our forum first to comment.

Comments

By: Gregory Hall
Reply  

Why doesn't the cfssl serve command serve the interemediate instead of the root? Shouldn't that be the cert served to lemur for signing end-user certs. ( so the root could be offline )

By: Anurag
Reply  

When I am specifying the CFSSL paramters in the lemur conf file and do CA creation from GUI, I am getting error:

Was not created! 'NoneType' object has no attribute 'strip'

Any suggestions? in fact I added a print statement to print the CFSSL_ROOT and that itself is giving None