The lemur signer expects a csr via stdin, along with the ENV vars and CLI flags, it passes the cert to the declared lemur endpoint, once done, it spits out the signed cert chain at stdout.
Expects the netfix lemur API to be available.
Authority to use for signing
--authority="TestCA"
Cert validity in years
--valid-years 1
Owner contact email address
--owner [email protected]
Common Name (required)
--common-name xadse231.bmc.example.com
Lemur auth token
KEY=sdfgsASDWERsdfsdfwersfdgsfg
Lemur API endpoint
ENDPOINT=https://lemur/api/1/certificates
cat /tmp/idrac9.csr | DEBUG_SIGNER=1 KEY="sdfgsASDWERsdfsdfwersfdgsfg" \
ENDPOINT="https://lemur/api/1/certificates" ./lemur_signer \
--authority="TestCA" --valid-years 1 --owner [email protected] --common-name="xadse231.bmc.example.com"