Hi Richard,

did you create and import and SCEP token:

  openxpkiadm alias --realm ca-one --token scep \
    --identifier `openxpkiadm certificate id --file ca-one-scep-1.crt`

Is there anyting in the openxpki.log when you make the request?

Oliver


Am 10.12.2016 um 21:04 schrieb Richard Franks:
Hi Oliver

I’m following the Quickstart guide, which claims

"For a testdrive, there is no need for any configuration, just
call |http://host/scep/scep|”, which is what I am doing.

What additional config do I require in order to get it working?

Thanks,
Richard

On 10 Dec 2016, at 13:14, Oliver Welter <[email protected]
<mailto:[email protected]>> wrote:

Hi Richard,

I dont want to be "Captain Obvious" but did you create/assign an SCEP
Token in the OXI config? Retrieving the SCEP CA certificate is just a
plain HTTP GET operation without any crypto involved and this really
looks like there is just no SCEP server token set up.

Oliver

Am 09.12.2016 um 13:05 schrieb Richard Franks:
I have successfully got OpenXPKI up and running now, and all the
certificates are imported correctly.

I am trying to set up SCEP, and am getting an error when I try to
call it:

mod_fcgid: stderr: [Fri Dec  9 12:03:15 2016] scep.fcgi: Use of
uninitialized value in subroutine entry at /usr/lib/cgi-bin/scep.fcgi
line 101

This is appearing in the apache error logs. SSCEP shows the following
errors:

sscep: requesting CA certificate
sscep: wrong (or missing) MIME content type
sscep: error while sending message

Has anyone come across these errors before, or have any tips in
fixing them?

Thanks,
Richard


------------------------------------------------------------------------------
Developer Access Program for Intel Xeon Phi Processors
Access to Intel Xeon Phi processor-based developer platforms.
With one year of Intel Parallel Studio XE.
Training and support from Colfax.
Order your platform today.http://sdm.link/xeonphi



_______________________________________________
OpenXPKI-users mailing list
[email protected]
<mailto:[email protected]>
https://lists.sourceforge.net/lists/listinfo/openxpki-users



--
Protect your environment -  close windows and adopt a penguin!

------------------------------------------------------------------------------
Developer Access Program for Intel Xeon Phi Processors
Access to Intel Xeon Phi processor-based developer platforms.
With one year of Intel Parallel Studio XE.
Training and support from Colfax.
Order your platform
today.http://sdm.link/xeonphi_______________________________________________
OpenXPKI-users mailing list
[email protected]
<mailto:[email protected]>
https://lists.sourceforge.net/lists/listinfo/openxpki-users



------------------------------------------------------------------------------
Developer Access Program for Intel Xeon Phi Processors
Access to Intel Xeon Phi processor-based developer platforms.
With one year of Intel Parallel Studio XE.
Training and support from Colfax.
Order your platform today.http://sdm.link/xeonphi



_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users



--
Protect your environment -  close windows and adopt a penguin!

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

------------------------------------------------------------------------------
Developer Access Program for Intel Xeon Phi Processors
Access to Intel Xeon Phi processor-based developer platforms.
With one year of Intel Parallel Studio XE.
Training and support from Colfax.
Order your platform today.http://sdm.link/xeonphi
_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users

Reply via email to