You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Currently, I am unable to use any of the providers offered in your utility. I can only use self-signed certificates and add them to signingkeys.json. However, I keep encountering different errors each time I try, such as:
Error: certificate-chain is invalid, certificate with subject "": extended key usage must not contain ServerAuth eku (mkcert/openssl tools)
Crypto/Rsa: verification error (certs from vault)
Could someone help me generate a certificate that will pass validation with this utility? Alternatively, if it's possible to increase the validity period of the generate-test certificate, that would also be helpful.
Thank you in advance!
What did you expect to happen?
Use self-signed certificates normally
How can we reproduce it?
Mkcert
Openssl generate
Describe your environment
Zsh
What is the version of your Notation CLI or Notation Library?
Activity
FeynmanZhou commentedon Oct 9, 2025
Hi @justlucknb , where did you store the generated key and cert? Is there a key management system like HashiCorp Vault?
github-actions commentedon Dec 20, 2025
This issue is stale because it has been opened for 60 days with no activity. Remove stale label or comment. Otherwise, it will be closed in 30 days.
github-actions commentedon Feb 19, 2026
Issue closed due to no activity in the past 30 days.