{"action":"created","issue":{"url":"https://api.github.com/repos/rhinstaller/pesign/issues/19","repository_url":"https://api.github.com/repos/rhinstaller/pesign","labels_url":"https://api.github.com/repos/rhinstaller/pesign/issues/19/labels{/name}","comments_url":"https://api.github.com/repos/rhinstaller/pesign/issues/19/comments","events_url":"https://api.github.com/repos/rhinstaller/pesign/issues/19/events","html_url":"https://github.com/rhinstaller/pesign/issues/19","id":145310713,"number":19,"title":"Certificate extension not found error","user":{"login":"tfheen","id":124245,"avatar_url":"https://avatars.githubusercontent.com/u/124245?v=3","gravatar_id":"","url":"https://api.github.com/users/tfheen","html_url":"https://github.com/tfheen","followers_url":"https://api.github.com/users/tfheen/followers","following_url":"https://api.github.com/users/tfheen/following{/other_user}","gists_url":"https://api.github.com/users/tfheen/gists{/gist_id}","starred_url":"https://api.github.com/users/tfheen/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tfheen/subscriptions","organizations_url":"https://api.github.com/users/tfheen/orgs","repos_url":"https://api.github.com/users/tfheen/repos","events_url":"https://api.github.com/users/tfheen/events{/privacy}","received_events_url":"https://api.github.com/users/tfheen/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2016-04-01T23:46:15Z","updated_at":"2017-01-29T19:09:27Z","closed_at":null,"body":"I'm trying to get pesign to sign using a key and cert I have on a yubikey, but it errors complaining about \"Certificate extension not found\":\n\n```\n$ /tmp/zz/pesign/src/pesign --certdir=$PWD -t \"PIV_II (PIV Card Holder pin)\" -c \"/CN=Debian Test Secure Boot Signer\" --sign -i /boot/efi/EFI/debian/grubx64.efi -o signed.efi\nEnter Password or Pin for \"PIV_II (PIV Card Holder pin)\":\ncms_common.c:find_certificate:470: could not find certificate in list: Certificate extension not found.\npesign: Could not find certificate /CN=Debian Test Secure Boot Signer\n```\n\nI followed the recipe from https://fedoraproject.org/wiki/User:Pjones/SecureBootSmartCardDeployment on how to generate the certs, and https://dennis.silvrback.com/openssl-ca-with-yubikey-neo for loading it onto the smart card.\n\nWhat certificate extension is it looking for?\n"},"comment":{"url":"https://api.github.com/repos/rhinstaller/pesign/issues/comments/275937571","html_url":"https://github.com/rhinstaller/pesign/issues/19#issuecomment-275937571","issue_url":"https://api.github.com/repos/rhinstaller/pesign/issues/19","id":275937571,"user":{"login":"tfheen","id":124245,"avatar_url":"https://avatars.githubusercontent.com/u/124245?v=3","gravatar_id":"","url":"https://api.github.com/users/tfheen","html_url":"https://github.com/tfheen","followers_url":"https://api.github.com/users/tfheen/followers","following_url":"https://api.github.com/users/tfheen/following{/other_user}","gists_url":"https://api.github.com/users/tfheen/gists{/gist_id}","starred_url":"https://api.github.com/users/tfheen/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tfheen/subscriptions","organizations_url":"https://api.github.com/users/tfheen/orgs","repos_url":"https://api.github.com/users/tfheen/repos","events_url":"https://api.github.com/users/tfheen/events{/privacy}","received_events_url":"https://api.github.com/users/tfheen/received_events","type":"User","site_admin":false},"created_at":"2017-01-29T19:09:27Z","updated_at":"2017-01-29T19:09:27Z","body":"@bluca, I ended up with `pesign --certdir=$PWD -t \"PIV_II (PIV Card Holder pin)\" -c \"Certificate for Digital Signature\" --sign -i /tmp/bootx64.efi -o /tmp/bootx64.signed.efi` (adjust paths as appropriate). Does that work for you?\r\n"}}
{"actor":{"display_login":"tfheen"}}