Michael Weith wrote:

Michael,

1. renaming or make a link to scep is fine for me. On this cisco router you can only set the ip addresse, port number and path as option and the IOS is adding "pkiclient.exe?operation=GetCACert&message=OpenCA HTTP/1.0"

2. on "operation" I got following error messages:
General error 700 Command serverInfo Not Supported  (yet ?!?)



what u mean bei Command serverInfo? there is no command server info defined inside the scep protocol, maybe u tried to call via browser, when u get this error?

for testing scep - there is a nice tool - called sscep
you can find it here: http://www.klake.org/~jt/sscep/

it hase also lots of debugging informations if it works with sscep it should work with cisco too - should...
its quite nice for testing - i used it a lot during final development of the current scep code, since it
didn't work at all in the beginning somehow with anything - hehe


but i havn't checked the actual snapshots - so i will hopefully do so latest
end of week and look - there shouldn't be anything broken on the scep part
since there are no recent code changes on this part, not that i rember ;o)

requesting the url by browser:
http://192.168.0.195/cgi-bin/scep/scep?operation=scepGetCACert&message=OpenCA HTTP/1.0




no no no ;o)
the SCEP command is: GetCACert so the cgi line has to be:
http://192.168.0.195/cgi-bin/scep/scep?operation=GetCACert&message=OpenCA

yeah - u cant request operation: scepGetCACert - this isnt working ;o) - because its simply not defined
for the protocol... alternative u can use: GetCACertChain


so if u make a browsercall it should look like my line... this will work (i hope ;o), since your last call works,
i'm actually sure, it will work...


3. on "GetCACert" I got following error messages:
General error 700 Command GetCACert Not Supported  (yet ?!?)
http://192.168.0.195/cgi-bin/scep/scep?cmd=GetCACert&message=OpenCA HTTP/1.0



yes - this can't work too - since cmd is a openca parameter and there is no function defined GetCACert
the function is called scepGetCACert thats why this line works:


http://192.168.0.195/cgi-bin/scep/scep?cmd=scepGetCACert&message=OpenCA HTTP/1.0 is working fine.



but this isn't importend, since this is usally handeld inside of scep command itself

I believe the mapping cmd to operation and scepGetCACert to GetCACert is broken.



no there shouldn't be anything broken, u just should use the right cgi-calls than everything should work fine


greetings dalini


------------------------------------------------------- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps & Web services for Linux with a free DVD software kit from IBM. Click Now! http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click _______________________________________________ Openca-Users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to