cloudflare / cfssl

CFSSL: Cloudflare's PKI and TLS toolkit

Home Page:https://cfssl.org/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Unable to sing CSR using the PKCS11 module

razvan420 opened this issue · comments

Hello, i am trying to sing a csr using the PKCS11 module, so my command looks like this:

cfssl sign -ca=/root/cfssl-pkcs11-ca/cacert.pem \
-pkcs11-module="/usr/lib/x86_64-linux-gnu/opensc-pkcs11.so" \
-pkcs11-label="SmartCard-HSM (UserPIN)" \
-pkcs11-token="0" -pkcs11-pin="123456" \
-config="/etc/cfssl/conf/ca-config.json" \
-profile="intermediate-ca"  ca.csr > some_file

It gives me this error:
flag provided but not defined: -pkcs11-module
The above information about the HSM is correctly and the module is the right one.
Anyone got any ideea how should i do this?