[−][src]Module rpki::csr
Certificate Signing Requests (CSR) for RPKI.
Certificate Signing Requests, also called Certification Requests, for the RPKI use the PKCS#10 Certification Requests defined in RFC2986, while limiting the allowed extensions in section 6 of RFC6487.
They are used in the exchange defined in section 3.4.1 of RFC6492 where a child Certificate Authority requests a new certificate to be signed by its parent CA.
The CSR includes:
- a suggested subject
- the public key
- extensions:
- basic constraints
- key usage
- extended key usage
- subject information access
- a signature (to prove possession of the public key)
Structs
Csr | An RPKI Certificate Sign Request. |