Novell Documentation: Novell Certificate Server Libraries for C

2.18 Creating a Certificate from a CSR

The first step in creating a certificate from a CSR is to find a CA and retrieve information from it. The second step is to determine the certificates attributes and extensions using the information from the previous step and user input.

Find the CA by calling NPKIFindOrganizationalCA. Then call these accessor functions:
- NPKIGetHostServerDN—to get the name of the server that hosts the CA
- NPKIGetServerUTCTime—to get the current time on the server which hosts the CA
- NPKIGetServerInfo—to get the supported key signature algorithms and the maximum and minimum validity times
Determine the certificate attributes and extensions, then create the certificate by calling NPKIGenerateCertificateFromCSR.

For a sample implementation of this task, see SignCSR.