action generate-certificate-signing-request {
  nacm:default-deny-all;
  description
    "Generates a certificate signing request structure for
      the associated asymmetric key using the passed subject
      and attribute values.  The specified assertions need
      to be appropriate for the certificate's use.  For
      example, an entity certificate for a TLS server
      SHOULD have values that enable clients to satisfy
      RFC 6125 processing.";  input {
    leaf subject {
      type binary;
      mandatory true;
      description
        "The 'subject' field per the CertificationRequestInfo
          structure as specified by RFC 2986, Section 4.1
          encoded using the ASN.1 distinguished encoding
          rules (DER), as specified in ITU-T X.690.";
      reference
        "RFC 2986:
            PKCS #10: Certification Request Syntax
                      Specification Version 1.7.
          ITU-T X.690:
            Information technology - ASN.1 encoding rules:
            Specification of Basic Encoding Rules (BER),
            Canonical Encoding Rules (CER) and Distinguished
            Encoding Rules (DER).";
    }
    leaf attributes {
      type binary;
      description
        "The 'attributes' field from the structure
          CertificationRequestInfo as specified by RFC 2986,
          Section 4.1 encoded using the ASN.1 distinguished
          encoding rules (DER), as specified in ITU-T X.690.";
      reference
        "RFC 2986:
            PKCS #10: Certification Request Syntax
                      Specification Version 1.7.
          ITU-T X.690:
            Information technology - ASN.1 encoding rules:
            Specification of Basic Encoding Rules (BER),
            Canonical Encoding Rules (CER) and Distinguished
            Encoding Rules (DER).";
    }
  }
  output {
    leaf certificate-signing-request {
      type binary;
      mandatory true;
      description
        "A CertificationRequest structure as specified by
          RFC 2986, Section 4.2 encoded using the ASN.1
          distinguished encoding rules (DER), as specified
          in ITU-T X.690.";
      reference
        "RFC 2986:
            PKCS #10: Certification Request Syntax
                      Specification Version 1.7.
          ITU-T X.690:
            Information technology - ASN.1 encoding rules:
            Specification of Basic Encoding Rules (BER),
            Canonical Encoding Rules (CER) and Distinguished
            Encoding Rules (DER).";
    }
  }
}