After submitting the certificate signing request to the CA, the CA will sign the request and return a signed copy of the certificate. Typically this will be sent in PEM format, the same format used for the CSR and private key.
The certificate data can be imported in one of two ways:
pki certificate <name> enterthen copy and paste the PEM data
Copy the PEM format certificate file to the TNSR host, then use
pki certificate <name> import <file>to import from a file from the current working directory.
The certificate data is stored in a file at
/etc/pki/tls/tnsr/certs/<name>.crt after entering or importing the contents.
When importing a certificate created outside of TNSR, The private key must be imported and present before TNSR can import the certificate.
Copy and Paste¶
First, use the
tnsr# pki certificate mycert enter Type or paste a PEM-encoded certificate. Include the lines containing 'BEGIN CERTIFICATE' and 'END CERTIFICATE'
Remember that the private key, CSR, and certificate must all use identical names!
Next, paste the certificate data:
-----BEGIN CERTIFICATE----- <cert data> -----END CERTIFICATE-----
Import from File¶
First, make sure that the copy of the certificate file is in PEM format. The CA may have delivered the certificate in PEM format, or another format. Convert the certificate to PEM format if it did not come that way.
Next, copy the certificate file to TNSR and start the CLI from the directory
containing the certificate file. The filename extension is not significant, and
txt, or anything else depending on how the file was
delivered from the CA.
Next, use the
tnsr# pki certificate mycert import mycert.pem
Other Certificate Operations¶
To view a list of all certificates known to TNSR:
tnsr# pki certificate list
To view the PEM data for a specific certificate known to TNSR:
tnsr# pki certificate <name> get
To delete a certificate:
tnsr# pki certificate <name> delete