Expand description
GET /.well-known/est/csrattrs — CSR Attributes Request.
RFC 7030 §4.5: EST clients request the CSR attributes that the server expects in enrollment requests. The response tells the client which algorithms, extensions, and subject fields to include in its PKCS#10 CSR.
§CSR Attributes Template (RFC 9908)
When csr_template is configured, the response also includes a
CertificationRequestInfoTemplate attribute (OID
1.2.840.113549.1.9.16.2.61) that partially pre-fills a
CertificationRequestInfo, guiding the client on subject DN,
key algorithm, and required extensions. The template coexists
with the OID-list mode for backward compatibility.
No authentication required per RFC 7030 §4.5.
Per-label attribute variation is supported (RHELBU-3536 R31): different EST labels can advertise different required attributes based on their enrollment profile.
Modules§
- oids
- Well-known OIDs for CSR attributes.
Functions§
- get_
csrattrs GET /.well-known/est/csrattrs