Comments (4)
I've found the same posts, which is why I upgraded to the latest firmware, mine now is 20230822.
I think this looks like an HP bug and not related to step-cli, so I'm closing this issue.
Thank you for your help.
from cli.
Hey @LauraTaylorUK,
I found this SE thread with a similar error message, but using OpenSSL instead: https://serverfault.com/questions/1121312/error-message-the-format-of-the-file-is-invalid-when-attempting-to-import-cert. It may be worth a try to remove the intermediate certificate from your printer.crt
, and then retry the original command (or maybe the --legacy
one). Simplest option to make printer.crt
contain just the leaf is to remove all but the first ----- BEGIN CERTIFICATE ----- / ----- END CERTIFICATE -----
parts.
You'll likely need to install the intermediate cert in the clients connecting to your printer too to get a successful TLS connection, because the printer won't have it available to serve it. You could also opt for manually signing a cert for the printer using the root key, so that the intermediate's not required to get a full chain.
If you indeed have to install the intermediate on your client(s), you could file a bug with HP, because servers are responsible for sending the leaf + intermediates.
from cli.
Thank you for the suggestio, I've tried the above trick, I removed the intermediate certificate but that did not help, same error :(
I also tried with and without --legacy
.
from cli.
I also found these blog posts: part1, part2. Can you try it with a different firmware version? The blog posts indicate 20230321
might work? if it does, it might mean they broke the firmware again with the newer one you tried last?
from cli.
Related Issues (20)
- `step certificate format` breaks on leading newlines in a PEM HOT 1
- Add the ability to set friendly name when using `step certificate p12` HOT 2
- AWS provisioner should use configured certificates in the CA
- [Bug]: Updating provisioner configuration makes template configuration disappear HOT 4
- [Bug]: Console flow broken for Azure AD (Entra) HOT 1
- [Bug]: step ssh certificate only adds the cert to ssh-agent and not the private key HOT 6
- [Bug]: `step ca init --provisioner acme --acme` will create an invalid config
- [Bug]: cosign documentation has wrong identity HOT 1
- Cloudflare zero trust service token HOT 2
- Stable URL to the latest release files HOT 2
- `step certificate inspect` outputs to stdout, despite docs saying otherwise
- Unknown public key type ERROR- Any chances to add support of gost-engine (openssl-gost-engine RPM or libengine-gost-openssl DEB)? HOT 1
- [Bug]: `v0.25.0` causes error (`error reading <kms_id/alias>: no such file or directory`) when signing intermediate CA certificate w/ AWS KMS HOT 3
- [Bug]: Step CLI panics when inspecting improperly encoded certificate HOT 3
- [Bug]: cannot install certs on debian HOT 1
- [Bug]: document for leaf certificate template contains typo HOT 1
- [Bug]: `step ca provisioner update` fails for JWK provisioner if `--create` is specified
- [docs]: usage of 'ca token' unclear
- [docs]: Installation routine not working - cosign verification failed HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from cli.