HOWTO generate Elliptic Curve CSRs FortiGate

In this post I will show you how to craft a EC based CSR, This signing request can be done vey easily from the CLI

Elliptic curve

1; specific the  subject parameters on the cli

exec vpn certificate local generate ec <CRTNAME>  secp521r1 <cn.name>  C  ST L O OU  emailaddress 

2;  execute a GET and SHOW full to validate

3; copy down  the   CSR  portion and send it to your Authority for signing

SECTION masked in blue you send to the CA.

Ken

NSE ( network security expert) and Route/Switching Engineer

kfelix  -----a----t---- socpuppets ---dot---com

     ^      ^

=(  @  @ )=

         o 

        /  \