Hi Everybody, I am trying to use OpenCA's SCEP interface with Netscreen NS208 boxes. I am using OpenCA 0.9.2-RC6 and ScreenOS 5.0.0r8.0.
The CSR is correctly generated and received by the OpenCA server. However after the request is approved and the certificate issued the Netscreen box does not retrieve the certificate. The first error was an incorrect 'Content-type' response from the SCEP interface. The file /opt/OpenCA/lib/servers/scep/cmds/scepPKIOperation was sending : "Content-type: x-pki-message\n\n" instead of "Content-type: application/x-pki-message\n\n". Now that I have modified this I get the following error: ## 10:10:14 : PKCS7: envoloped. ## 10:10:14 : lib=33 func=109 reason=111 file=../../pkcs7/pk7_doit.c line=670 ## 10:10:14 : PKI: The device cannot decrypt SCEP data in outer PKCS7 envelope. Any idea of what could cause this error. If you want I can send you the complete netscreen debug file. Many thanks, Paul. ------------------------------------------------------- This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java Enterprise J2EE developer tools! Get your free copy of BEA WebLogic Workshop 8.1 today. http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click _______________________________________________ Openca-Users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-users
