Hi all,
I have a question regarding the SCEP eligibility step.
I have tested the process with 1 (unconditional generation) and 0 (no
generation of certificate), and this is working as expected.
eligible:
initial:
value: 0
I would like to write a connector to accept or deny more precisely, for
example with the subject CN. Imagine I want to generate certificates for
docker.mydomain.local (eligibility : 1) but not for the rest of domain
mydomain.local.
Would you have a simple connector that is working to make me start ? Can I
use a Regexp to do this ? Do we have to write a mini Perl or Bash script
that returns the resulting eligibility ?
I do not find a simple example to start with and I am not a Perl developper.
I also tried the password for scep request, and the certificate gets
generated all the time :
- when I do not set a password in request,
- when I put the right password,
- and when I put another password.
The password check does not seem to be active, is there an option to
activate or is it more complex ?
challenge:
value: SecretChallenge
Many thanks
Raphaël Buquet
_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users
