On Thu, 2003-06-12 at 12:24, Pierre Scholtes wrote:
> Something else. Is the scep functionality operational.
yes
> If yes, is there any documentation somewhere?
which leads to - no ;o), but:
basically it should just work, that means:
if you --enable-scep at the configure options
and: you have to set in config.xml the scep parameters
the scep-key/cert should usaly (if no extra host) the key
and cert file you use for the ra - as it will communicate
with the scep-client...
so - if an scep-client requests an cert, it should get an
pending answer, and you should find those request in the ra
and you can process it like any other request too...
just that easy... ;o)
one hint: (since i havn't finished updating all config files
for scep-crl support) in file: scepPKIOperation comment following
(in openca-0.9 dir: ./src/common/lib/cmds/scepPKIOperation)
line out: $scep_crl = getRequired ("scepCRL"); (line 35)
otherwise you will get errors...
i will just check in the changed file, so the cvs should be than
fully working for the moment, without scep-crl functionality...
one more thing to do: some clients like cisco-pix are not fully
working right now, because the have kind of different requesting
behavior... which isn't fully supported right now, but i'm working
on it...
sscep, cisco vpn 3000 client, fsecure should be working so far
(if i remember right ;o)
scep-crl-support isn't working at the moment, but the common
way through crl-distribution-points mentioned in the ca/ra certs
should be working fine (because it has nothing to do with scep)
> If no, is support for scep planed and if yes, when do you think that
> there will be a version supporting it.
>
o i hope it will at a really releasable state before 0.9.2 is going
to be public... but looks like... just crl is missing... but not so
importend i think - because the clients should use the common way to
fetch crls...
greetings
dalini
ps: sorry for late reply - somehow i send it not to the list by accident ;o)
-------------------------------------------------------
This SF.NET email is sponsored by: eBay
Great deals on office technology -- on eBay now! Click here:
http://adfarm.mediaplex.com/ad/ck/711-11697-6916-5
_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users
