When using "sscep" to send enrollment requests, an extraneous trailing
newline appears in the PEM PKCS7 text just before the "-----END
PKCS7-----" line. This causes a verification failure. Modifying
OpenXPKI/Server/Workflow/Activity/SCEP/ExtractCSR.pm with the addition
of "chomp()" as shown below appears to mitigate the problem.
-Michael Heyman
----------------------------------------------------------------
--- ExtractCSR.pm.old Thu Sep 13 15:59:11 2007
+++ ExtractCSR.pm Thu Sep 13 15:46:12 2007
@@ -29,11 +29,11 @@
);
my $tm = CTX('crypto_layer');
my $pkcs7 = $context->param('pkcs7_content');
- $pkcs7 = "-----BEGIN PKCS7-----\n" . $pkcs7 . "-----END
PKCS7-----\n";
+ $pkcs7 = "-----BEGIN PKCS7-----\n" . chomp($pkcs7) . "\n-----END
PKCS7-----\n";
##! 32: 'pkcs7: ' . $pkcs7
my $scep_token =
CTX('pki_realm_by_cfg')->{$self->{CONFIG_ID}}->{$pki_realm}->{scep}->{id
}->{$server}->{crypto};
my $pkcs10 = $scep_token->command({
-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
OpenXPKI-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-devel
