Hi Raphael, the docs of the EvaluateEligibilty Class should give you an idea of how to call the connector from the config:
https://github.com/openxpki/openxpki/blob/master/core/server/OpenXPKI/Server/Workflow/Activity/Tools/EvaluateEligibility.pm And there is also a new connector that can perform a RegEx check: https://github.com/openxpki/openxpki/blob/master/core/server/OpenXPKI/Connector/Regex.pm So no need to write a single line of perl - its just config ;) Regarding the configuration of the workflow have a look here https://openxpki.readthedocs.io/en/latest/reference/configuration/workflows/scep.html The password should become active by juts setting it in the config. Oliver Am 27.02.19 um 13:12 schrieb Raphael Buquet: > > Hi all, > > I have a question regarding the SCEP eligibility step. > I have tested the process with 1 (unconditional generation) and 0 (no > generation of certificate), and this is working as expected. > > eligible: > initial: > value: 0 > > I would like to write a connector to accept or deny more precisely, for > example with the subject CN. Imagine I want to generate certificates for > docker.mydomain.local (eligibility : 1) but not for the rest of domain > mydomain.local. > Would you have a simple connector that is working to make me start ? Can > I use a Regexp to do this ? Do we have to write a mini Perl or Bash > script that returns the resulting eligibility ? > I do not find a simple example to start with and I am not a Perl developper. > > I also tried the password for scep request, and the certificate gets > generated all the time : > - when I do not set a password in request, > - when I put the right password, > - and when I put another password. > > The password check does not seem to be active, is there an option to > activate or is it more complex ? > > challenge: > value: SecretChallenge > > Many thanks > > Raphaël Buquet > > > _______________________________________________ > OpenXPKI-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/openxpki-users > -- Protect your environment - close windows and adopt a penguin!
smime.p7s
Description: S/MIME Cryptographic Signature
_______________________________________________ OpenXPKI-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openxpki-users
