Hi Michael,

you really found one bug. The second problem is a configuration problem but I fixed it on the server side too.

Michael Weith wrote:

1. renaming or make a link to scep is fine for me. On this cisco router you can only set the ip addresse, port number and path as option and the IOS is adding "pkiclient.exe?operation=GetCACert&message=OpenCA HTTP/1.0"

I added a link pkiclient.exe. Now we support http://123.123.123.123/cgi-bin/scep/pkiclient.exe too.


2. on "operation" I got following error messages:
General error 700 Command serverInfo Not Supported  (yet ?!?)

requesting the url by browser:
http://192.168.0.195/cgi-bin/scep/scep?operation=scepGetCACert&message=OpenCA HTTP/1.0

This is a manual operation and should fail. If you use the OpenCA string scepGetCACert then you must use cmd. Operation is only mapped for the standard SCEP operation - in this case you have to use GetCACert.


3. on "GetCACert" I got following error messages:
General error 700 Command GetCACert Not Supported  (yet ?!?)
http://192.168.0.195/cgi-bin/scep/scep?cmd=GetCACert&message=OpenCA HTTP/1.0

This is a bug. I fixed it in CVS. The next snapshot should work.


http://192.168.0.195/cgi-bin/scep/scep?cmd=scepGetCACert&message=OpenCA HTTP/1.0 is working fine.

Yes, but scepPKIOperation fails because CRLDir is missing in scep.conf. I fixed this too.


I believe the mapping cmd to operation and scepGetCACert to GetCACert is broken.

You are correct.


BTW why did no other developer add pkiclient.exe to the Makefile in web-interfaces/scep? I'm not the only one who has CVS access and we did the same hack for Internet Explorer in pub/Makefile (download.cer). I'm surely the guy with the smallest SCEP knowledge of the three guys who coded the SCEP utility :)

Michael
--
-------------------------------------------------------------------
Michael Bell                   Email: [EMAIL PROTECTED]
ZE Computer- und Medienservice            Tel.: +49 (0)30-2093 2482
(Computing Centre)                        Fax:  +49 (0)30-2093 2704
Humboldt-University of Berlin
Unter den Linden 6
10099 Berlin                   Email (private): [EMAIL PROTECTED]
Germany                                       http://www.openca.org



-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to