Situation I have successfully worked out how to create a certificate authority create the server certificate add a new certificate authority into ZAC create a new client certificate to validate the certificate authority My problem now is how to create an end point identity. I started this my cre…

Is it possible to generate an CA based identity with the CLI? I am not sure how to pass in the config details

I think I now know what is the issue When you create an identity from a new certificate authority.. it reverts it back to a one time token enrollment. This seems to disable the means to create the jwt token so that it can be enrolled. [Screen Shot 2022-04-26 at 3.40.59 pm]

As a work around.. I repeated this same process using the Netfoundry console.. I thought this was going to be promising.. but unfortunately.. I have not found a way for the Netfoundry console to interact with an open ziti controller. is this possible? if so.. it would help me overcome my current …

NetFoundry console questions can be asked over at https://community.netfoundry.io/ . If you got to the point where you created the cert to be able to verify the CA you’re nearly there. You need to enroll your identity using the CA/key/cert for the identity. This link shows you how to do that enroll…

Quick update.. as I am still stuck on this.. maybe I am doing something wrong as I created the Certificate Authority manually.. and then imported. When I did some more sleuthing.. and I came across this interesting script.. that uses the ziti pki commands openziti/ziti/blob/release-next/et…

just an fyi… I will be getting back to this “tomorrow” (I’m pretty sure it’s already “tomorrow” for you :slight_smile: ) I haven’t forgotten you!

All ok… it gave me time to really understand this… and explore lots of other options… twists and turns… and other new surprises. I am looking forward to working through this… as it will help me unlock my next mastery level :slight_smile: The main stumbling block is downloading the jwt file… as the…

[image] markamind: When I did some more sleuthing… and I came across this interesting script… that uses the ziti pki commands I almost sent you those scripts last week but didn't have time to describe them nor to test them. I was working up an example based on those for you. I'm glad you disc…

I actually was able to figure it out after a tiny bit of scratching around. This will be a big post. Let me put it together and I’ll reply in a few

Creating Endpoint with your own Certificate Authority

Ziti Administration Console

markamind April 26, 2022, 12:58pm 6

This is super helpful…

X509: certificate relies on legacy Common Name field, use SANs instead

Topic		Replies	Views
Ziti edge enrol identity not inserting CA bundle Ziti Overlay	33	603	November 5, 2022
X509: certificate relies on legacy Common Name field, use SANs instead Building/Development	11	6147	May 2, 2022
3rd party CA problems/Questions General Questions	10	867	July 5, 2022
Openziti installation in production like environment Support	45	2053	December 31, 2022
Ziti and spiffe General Questions	26	667	September 26, 2022

Creating Endpoint with your own Certificate Authority

Related topics