Would I use the enroll ui to call the endpoint then ?
On Fri, Sep 15, 2017 at 2:12 AM, Oliver Welter <[email protected]> wrote:
> Noah,
>
> you can not call the /scep endpoint with a browser. The webui is here
> http://107.175.59.60/openxpki/#/openxpki and seems to work, You should
> consider to put that behind a firewall or at least change the passwords.
>
> For SCEP you need to use a client tool like sscep or libscep, it seems to
> work:
>
> sscep/sscep getca -u http://107.175.59.60/scep -c /tmp/cacert
> sscep/sscep: requesting CA certificate
> sscep/sscep: valid response from server
>
> sscep/sscep: found certificate with
> subject: /DC=net/DC=openxpki/DC=ca-one/CN=OpenXPKI CA-One SCEP RA 1
> issuer: /DC=net/DC=openxpki/DC=ca-one/CN=OpenXPKI Issuing CA 1
> MD5 fingerprint: 54:3A:72:9E:EB:01:BA:F3:84:59:44:95:51:6F:9B:38
> sscep/sscep: certificate written as /tmp/cacert-0
>
> sscep/sscep: found certificate with
> subject: /DC=net/DC=openxpki/DC=ca-one/CN=OpenXPKI Issuing CA 1
> issuer: /CN=OpenXPKI CA-One Root CA 1
> usage: Digital Signature, Certificate Sign, CRL Sign
> MD5 fingerprint: 82:6A:6C:04:31:D6:B7:55:F7:7A:5F:5A:16:E3:13:DC
> sscep/sscep: certificate written as /tmp/cacert-1
>
> sscep/sscep: found certificate with
> subject: /CN=OpenXPKI CA-One Root CA 1
> issuer: /CN=OpenXPKI CA-One Root CA 1
> usage: Digital Signature, Certificate Sign, CRL Sign
> MD5 fingerprint: BE:0F:26:7B:44:D4:D3:45:C8:B8:DB:78:88:15:C9:0D
> sscep/sscep: certificate written as /tmp/cacert-2
>
> Oliver
>
> Am 14.09.2017 um 12:56 schrieb Noah Baatz:
>
>> If you could fix this that would be great how would I Verify domains is
>> there a built in thing or no and I18N_OPENXPKI_CLIENT_SCEP_INVALID_OP
>> error on the scep website here is the website link 107.175.59.60/scep <
>> http://107.175.59.60/scep>
>>
>> Sorry if this is in the wrong mailing list
>>
>>
>> ------------------------------------------------------------
>> ------------------
>> Check out the vibrant tech community on one of the world's most
>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>>
>>
>>
>> _______________________________________________
>> OpenXPKI-users mailing list
>> [email protected]
>> https://lists.sourceforge.net/lists/listinfo/openxpki-users
>>
>>
>
> --
> Protect your environment - close windows and adopt a penguin!
>
>
> ------------------------------------------------------------
> ------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> _______________________________________________
> OpenXPKI-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/openxpki-users
>
>
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users
