The provided CSR is invalid

host1k · February 27, 2025, 9:20am

I got the error in simulation mode:
{“errorCode”:“400”,“errorCategory”:“Invalid-CSR”,“errorMessage”:“The provided Certificate Signing Request (CSR) is invalid.”}**
In sanbox all fine.
In production mode getting:

{“requestID”:-2,“tokenType”:null,“dispositionMessage”:“NOT_COMPLIANT”,“binarySecurityToken”:null,“errors”:[“unable to submit and sign the csr in zatca side, caused : Denied by Policy Module”]

POST “simulation” or “core”/production/csids
For simulation PREZATCA-Code-Signing
For Core ZATCA-Code-Signing
… while getting csr

{‘csr.common.name’: ‘TST-2-MYVAT’,
‘csr.country.name’: ‘SA’,
‘csr.industry.business.category’: ‘Food’,
‘csr.invoice.type’: ‘1100’,
‘csr.location.address’: ‘SREETNAME1111’,
‘csr.organization.identifier’: ‘MyVAT’,
‘csr.organization.name’: ‘MyName’,
‘csr.organization.unit.name’: ‘MyUnitName’,
‘csr.serial.number’: ‘1-MyProviderName|2-V1|3-441c3310-e5f5-4b5e-bc58-727d484db044’}

In case of prod csr.common.name: “PRD-2-MYVAT”
All the data where MyName etc… is got from fatoora portal account, except of MyProviderName, I guess it’s free to text field, as uuid in csr.serial.number, generated it by myself and think it is gonna be a saved single variant for all cases which is gonna be onboarded from service.

Samples generated and succefull reported/cleared: 3 for simplified and 3 for standart.

It’s not clear for me what is wrong here. Hoping for some help. Thank you.

idaoud · February 27, 2025, 9:33am

Dear @host1k

Thanks for reaching out, Welcome to our community.

To provide comprehensive support as usual, can I kindly ask you to mention the method that you followed to generate the CSR?

Thanks,
Ibrahem Daoud.

host1k · February 27, 2025, 1:28pm

Thank you for the answer.
Integration used for python project, so I’m generating all data using the recommendations of project based on python to work with Zatca service.
Here’s the generator which I’m using in this case

github.com/mabaega/ZatcaPython

utilities/csr_generator.py

main

# csr_generator.py
from cryptography import x509
from cryptography.x509.oid import NameOID, ObjectIdentifier
from cryptography.hazmat.backends import default_backend
from cryptography.hazmat.primitives import hashes, serialization
from cryptography.hazmat.primitives.asymmetric import ec
import base64
import os
import re

class CsrGenerator:
    def __init__(self, config, environment_type):
        self.config = config
        self.environment_type = environment_type
        self.asn_template = self.get_asn_template()

    def get_asn_template(self):
        if self.environment_type == 'NonProduction':
            return 'TSTZATCA-Code-Signing'
        elif self.environment_type == 'Simulation':

This file has been truncated. show original

Topic		Replies	Views
Invalid-CSR","errorMessage":"The provided Certificate Signing Request (CSR) is invalid Onboarding, renewal and revocation	3	73	February 25, 2025
The provided Certificate Signing Request (CSR) is invalid. - Simulation env Onboarding, renewal and revocation	1	8	February 25, 2025
The provided Certificate Signing Request (CSR) is invalid Onboarding, renewal and revocation	8	981	September 27, 2024
Simulation Onboarding Issue : Error Invalid CSR Onboarding, renewal and revocation	7	259	January 23, 2025
Invalid-CSR error while onboarding Onboarding, renewal and revocation	1	15	February 25, 2025

The provided CSR is invalid

Related topics