69 ## CSR  section in BMC Certificate management
71 ### User flow for generating and installing Certificates(CSR Based)  argument
73 [Certificate Signing Request][csr](CSR) is a message sent from an applicant to a
75 This section provides the details of the CSR based certificate user flow.
77 - The user performs the CSR/create interface BMC creates new private key and CSR
78   object which includes CSR information.
79 - The user performs the CSR/export interface Allows the user to export the CSR
80   file which is part of newly created CSR object. This can be provided to the CA
87 [csr]: https://en.wikipedia.org/wiki/Certificate_signing_request
91 - BMC updates the private key associated to CSR for any new CSR request.
92 - BMC upload process automatically appends certificate file with system CSR
94 - CSR based Certificate validation is alway's based on private key in the
97 ### CSR Request  argument
99 - CSR requests initiated through D-Bus are time-consuming and might result D-Bus
101 - To overcome the time-out error, parent process is forked and CSR operation is
104 - OpenSSL library is used in generating CSR based on the algorithm type.
105 - At present supporting generating CSR for only "RSA" algorithm type.
107   sd_event_lopp so that callback method is invoked upon completion the CSR
109 - Callback method invoked creates a CSR object with the status of the CSR
111 - CSR read operation will return the CSR string if status is SUCCESS else throws
113 - Certificate Manager implements "/xyz/openbmc_project/Certs/CSR/Create"
115 - CSR object created implements "/xyz/openbmc_project/Certs/CSR" interface.
116 - Caller needs to validate the CSR request parameters.
118   CSR object to start reading CSR string.