[Cryptography-dev] How to copy attributes & extensions from CSR to CSRB?

2025-04-16 Thread Ian Pilcher via Cryptography-dev
I am working on a Let's Encrypt client that needs to create a new CSR, signed with a new key, every time that it renews a certificate. AFAICT, there really isn't any sort of "CSR template" format that I could put in a configuration file, so my preferred approach would be to simply use an existing

Re: [Cryptography-dev] How to copy attributes & extensions from CSR to CSRB?

2025-04-16 Thread Paul Kehrer via Cryptography-dev
This is the (as you noted, unofficial) escape hatch we added for alternate ASN.1 types that aren't UTF8String. We may revisit this once the ASN.1 DER work (https://github.com/pyca/cryptography/issues/12283) lands because then we'll have a public API for generating arbitrary ASN.1 structures, which