i have done some fixes at the scep code so the scep module now supports also the sending of crls
i just have to finish the changes in scepPKIOperation
(for the crl link...)
so its verified at the moment to work with sscep and cisco-pix (and i guess than it will also work with other cisco equipment)
I will try to test with an old 3640 I have at home... I will let you know ...
todo: - support for different certs just signing or encrypting (mainly a openca-config problem) but at the request ist not viewable that the req is for signing or encryption...
That's true. Indeed signing/encryption is only a matter of extensions, i.e. roles issues. As you will anyway have to contact the RA to have the certificate approved, it is just a matter of keyUsage
- support for getcert option of scep - support for crl-dp of scep
I guess when we have stable code, I will initiate to subit the work to the OpenSSL people for integration...
max: changes are still not shown at the cvs-list...
what do you mean ?
--
C'you,
Massimiliano Pala
--o-------------------------------------------------------------------------
Massimiliano Pala [OpenCA Project Manager] [EMAIL PROTECTED]
Tel.: +39 (0)59 270 094
http://www.openca.org Fax: +39 178 221 8225
http://openca.sourceforge.net Mobile: +39 (0)347 7222 365
smime.p7s
Description: S/MIME Cryptographic Signature
