Unable to sing CSR using the PKCS11 module
razvan420 opened this issue · comments
lismanrazvan commented
Hello, i am trying to sing a csr using the PKCS11 module, so my command looks like this:
cfssl sign -ca=/root/cfssl-pkcs11-ca/cacert.pem \
-pkcs11-module="/usr/lib/x86_64-linux-gnu/opensc-pkcs11.so" \
-pkcs11-label="SmartCard-HSM (UserPIN)" \
-pkcs11-token="0" -pkcs11-pin="123456" \
-config="/etc/cfssl/conf/ca-config.json" \
-profile="intermediate-ca" ca.csr > some_file
It gives me this error:
flag provided but not defined: -pkcs11-module
The above information about the HSM is correctly and the module is the right one.
Anyone got any ideea how should i do this?