After a long way, i am now on the same point as Paul. My sscep Client is working, but the netscreen isnt too.
Here the log from netscreen. ---------------------------------------------- GET request: len=2740 ## 14:14:14 : openHttpConnection: convert the host name 172.16.98.92. ## 14:14:14 : server IP 172.16.98.92 ## 14:14:14 : Trying to connect host 172.16.98.92 port 80 ## 14:14:14 : Trying to send to socket 523 ## 14:14:14 : openHttpConnection: done <0>. ## 14:14:14 : scep_rsp_ca_ra: done, p_scep_context = 217866c ## 14:14:16 : http socket <523> got data <06e4ec98> len <4350> byte. ## 14:14:16 : pkiExec: got content <application/x-pki-messag>, data <6e4edaa> da ta len <4076> ## 14:14:16 : pkiExec: in_process = 0 ## 14:14:16 : Got buf=6e4edaa len=4076 context 217866c contentType=application/x -pki-messag contentTypeLen=25 ## 14:14:16 : scep_server_rsp: sub command <14> ## 14:14:16 : scep_server_rsp: (SCEP) Got PKI operation response ## 14:14:16 : scep_rsp_pkioperation: p_scep_context = 217866c ## 14:14:16 : scep_rsp_cmd: p_scep_context = 217866c ## 14:14:16 : scep_rsp_pkioperation: SCEP_SUCCESS ## 14:14:16 : scep_rsp_pkioperation_success: p_scep_context = 217866c <057b9ea0> ## 14:14:16 : scep_transaction_id: len = 4 d3574d1a 819a530f 59083bbb 516982a3 ## 14:14:16 : PKI: no FQDN available when requesting certificate. ## 14:14:16 : lib=33 func=109 reason=111 file=../../pkcs7/pk7_doit.c line=670 ## 14:14:16 : PKI: The device cannot decrypt SCEP data in outer PKCS7 envelope. ## 14:14:16 : scep_rsp_pkioperation_success: p_scep_context = 217866c <057b9ea0> ## 14:14:16 : scep_rsp_pkioperation: PKCS7 data is not degenerated ## 14:14:16 : updateCertFile: Update the cert files. ## 14:14:16 : PKI: opened file for write, product<9>. ---------------------------------------------------- I dont understand what is meant with \"We use 3DES by default. Cisco\'s testequipment cannot handle strong ciphers by default. Perhaps NetScreen has the same problem (our testequipment had no such problems).\" What can i do to make it working? www.mails.at - Der kostenlose E-Mail Anbieter ------------------------------------------------------- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click _______________________________________________ Openca-Users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openca-users
