Hi,

I tried to modify the file
/etc/openxpki/config.d/realm/democa/scep/generic.yaml to modify the
parameters

*approval_points : 0     // if you set it to "0", all authenticated
requests are auto-approved!*

*allow_man_approv : 0  * *// If not auto-approved, allow operator to add
approval by hand*

Then I restarted the openxpkictl daemon but the SCEP request is not
auto-approved.

Guide me if I am doing something wrong or missing something

Om Parkash

On Mon, Jun 29, 2020 at 8:10 PM Siekmann, Marco <
[email protected]> wrote:

> Hi Om,
>
>
>
> you need to approve the request in the ui now. As far as I remember that,
> this can be found under workflow search.
>
> There are config options to automatic approve request.
>
> Take a look at the scep.config file.
>
>
>
> Kind regards
>
>
>
> Marco
>
>
>
> *Von:* Om Parkash <[email protected]>
> *Gesendet:* Montag, 29. Juni 2020 16:38
> *An:* [email protected]
> *Betreff:* [OpenXPKI-users] PENDING response from OpenXPKI SCEP service.
>
>
>
> Hi,
>
>
>
> When i try to enroll a certificate from SCEP service via the command
>
>
>
> *sscep enroll -u **http://localhost/scep/scep/*
> <http://localhost/scep/scep/>* -k priv.key -r test.csr -l test.crt -c
> ca.crt-0  -t 120*
>
>
>
> It shows the pending status as follows.
>
>
>
>
>
>
> *sscep: sending certificate request sscep: valid response from server
> sscep: reply transaction id: B47BEBCE88EEEE9DE96375A9EC1F8D98 sscep:
> pkistatus: PENDING*
>
>
>
> SCEP requests because they mostly occur from network devices and can occur
> any time. Does OpenXPKI support auto enrollment for SCEP requests?
>
>
>
> Regards
>
> Om Parkash
> _______________________________________________
> OpenXPKI-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/openxpki-users
>
_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users

Reply via email to