Skip to content

Use a self-signed certificate #1326

Closed as not planned
Closed as not planned

Description

@justlucknb

What is not working as expected?

Currently, I am unable to use any of the providers offered in your utility. I can only use self-signed certificates and add them to signingkeys.json. However, I keep encountering different errors each time I try, such as:

Error: certificate-chain is invalid, certificate with subject "": extended key usage must not contain ServerAuth eku (mkcert/openssl tools)

Crypto/Rsa: verification error (certs from vault)

Could someone help me generate a certificate that will pass validation with this utility? Alternatively, if it's possible to increase the validity period of the generate-test certificate, that would also be helpful.

Thank you in advance!

What did you expect to happen?

Use self-signed certificates normally

How can we reproduce it?

Mkcert
Openssl generate

Describe your environment

Zsh

What is the version of your Notation CLI or Notation Library?

notation version 0.10.0-alpha.3

Activity

  1. FeynmanZhou commented on Oct 9, 2025

    @FeynmanZhou
    Member

    Hi @justlucknb , where did you store the generated key and cert? Is there a key management system like HashiCorp Vault?

  2. added
    questionGeneral Q&A for product usage
    and removed
    bugSomething isn't working
    triageNeed to triage
    on Oct 20, 2025
  3. github-actions commented on Dec 20, 2025

    @github-actions

    This issue is stale because it has been opened for 60 days with no activity. Remove stale label or comment. Otherwise, it will be closed in 30 days.

  4. github-actions commented on Feb 19, 2026

    @github-actions

    Issue closed due to no activity in the past 30 days.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    StalequestionGeneral Q&A for product usage

    Type

    No type

    Projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions