Features/cli keygen

[jjrdk]

Add command to generate keys from CLI

[Copilot]

Pull request overview

Adds a new generate-keys command to opencertserver.cli and introduces BDD coverage to validate keypair generation outputs/paths.

Changes:

• Adds generate-keys CLI command (RSA/ECDSA) with output-path resolution and PEM file writing.
• Adds new Reqnroll feature + step assertions to validate generated key files exist and match.
• Adjusts certificate loading/validation in existing CLI commands (EST enroll, sign-csr).

Reviewed changes

Copilot reviewed 6 out of 7 changed files in this pull request and generated 7 comments.

Show a summary per file

File	Description
tests/opencertserver.cli.tests/StepDefinitions/OpenCertServerCliStepDefinitions.cs	Adds placeholder handling for key output paths, serializes CLI execution, and adds keypair match assertions.
tests/opencertserver.cli.tests/Features/GenerateKeys.feature	New BDD scenarios for RSA/ECDSA key generation and shared --out prefix behavior.
tests/opencertserver.cli.tests/Features/GenerateKeys.feature.cs	Auto-generated Reqnroll binding for the new feature.
src/opencertserver.cli/Program_GenerateKeys.cs	Implements generate-keys command and supporting helpers (path derivation, key generation, file output).
src/opencertserver.cli/Program.cs	Registers the new command with the root command.
src/opencertserver.cli/Program_EstEnroll.cs	Changes client certificate loading logic for mTLS.
src/opencertserver.cli/Program_SignCsr.cs	Tweaks CSR subject validation condition.

Files not reviewed (1)

• tests/opencertserver.cli.tests/Features/GenerateKeys.feature.cs: Language not supported

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.