Noah,

you can not call the /scep endpoint with a browser. The webui is here http://107.175.59.60/openxpki/#/openxpki and seems to work, You should consider to put that behind a firewall or at least change the passwords.

For SCEP you need to use a client tool like sscep or libscep, it seems to work:

 sscep/sscep getca -u http://107.175.59.60/scep -c /tmp/cacert
sscep/sscep: requesting CA certificate
sscep/sscep: valid response from server

sscep/sscep: found certificate with
  subject: /DC=net/DC=openxpki/DC=ca-one/CN=OpenXPKI CA-One SCEP RA 1
  issuer: /DC=net/DC=openxpki/DC=ca-one/CN=OpenXPKI Issuing CA 1
  MD5 fingerprint: 54:3A:72:9E:EB:01:BA:F3:84:59:44:95:51:6F:9B:38
sscep/sscep: certificate written as /tmp/cacert-0

sscep/sscep: found certificate with
  subject: /DC=net/DC=openxpki/DC=ca-one/CN=OpenXPKI Issuing CA 1
  issuer: /CN=OpenXPKI CA-One Root CA 1
  usage: Digital Signature, Certificate Sign, CRL Sign
  MD5 fingerprint: 82:6A:6C:04:31:D6:B7:55:F7:7A:5F:5A:16:E3:13:DC
sscep/sscep: certificate written as /tmp/cacert-1

sscep/sscep: found certificate with
  subject: /CN=OpenXPKI CA-One Root CA 1
  issuer: /CN=OpenXPKI CA-One Root CA 1
  usage: Digital Signature, Certificate Sign, CRL Sign
  MD5 fingerprint: BE:0F:26:7B:44:D4:D3:45:C8:B8:DB:78:88:15:C9:0D
sscep/sscep: certificate written as /tmp/cacert-2

Oliver

Am 14.09.2017 um 12:56 schrieb Noah Baatz:
If you could fix this that would be great how would I Verify domains is there a built in thing or no and I18N_OPENXPKI_CLIENT_SCEP_INVALID_OP error on the scep website here is the website link 107.175.59.60/scep <http://107.175.59.60/scep>

Sorry if this is in the wrong mailing list


------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot



_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users



--
Protect your environment -  close windows and adopt a penguin!

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users

Reply via email to