Hi Om, you can find the detailed guide to the SCEP workflow here: https://openxpki.readthedocs.io/en/latest/reference/configuration/workflows/scep.html
Please note that you need to recreate a new CSR each time as you will always get the "old" workflow when using the same request. Oliver Am 30.06.20 um 03:34 schrieb Om Parkash: > Hi, > > I tried to modify the file > /etc/openxpki/config.d/realm/democa/scep/generic.yaml to modify the > parameters > > *approval_points : 0 // if you set it to "0", all authenticated > requests are auto-approved!* > > *allow_man_approv : 0 * *// If not auto-approved, allow operator to add > approval by hand* > > Then I restarted the openxpkictl daemon but the SCEP request is not > auto-approved. > > Guide me if I am doing something wrong or missing something > > Om Parkash > > On Mon, Jun 29, 2020 at 8:10 PM Siekmann, Marco > <[email protected] > <mailto:[email protected]>> wrote: > > Hi Om,____ > > __ __ > > you need to approve the request in the ui now. As far as I remember > that, this can be found under workflow search. ____ > > There are config options to automatic approve request.____ > > Take a look at the scep.config file.____ > > __ __ > > Kind regards____ > > __ __ > > Marco____ > > __ __ > > *Von:*Om Parkash <[email protected] > <mailto:[email protected]>> > *Gesendet:* Montag, 29. Juni 2020 16:38 > *An:* [email protected] > <mailto:[email protected]> > *Betreff:* [OpenXPKI-users] PENDING response from OpenXPKI SCEP > service.____ > > __ __ > > Hi,____ > > __ __ > > When i try to enroll a certificate from SCEP service via the command____ > > __ __ > > *sscep enroll -u **http://localhost/scep/scep/**-k priv.key -r > test.csr -l test.crt -c ca.crt-0 -t 120*____ > > __ __ > > It shows the pending status as follows.____ > > __ __ > > *sscep: sending certificate request > sscep: valid response from server > sscep: reply transaction id: B47BEBCE88EEEE9DE96375A9EC1F8D98 > sscep: pkistatus: PENDING*____ > > __ __ > > SCEP requests because they mostly occur from network devices and can > occur any time. Does OpenXPKI support auto enrollment for SCEP > requests?____ > > __ __ > > Regards____ > > Om Parkash____ > > _______________________________________________ > OpenXPKI-users mailing list > [email protected] > <mailto:[email protected]> > https://lists.sourceforge.net/lists/listinfo/openxpki-users > > > > _______________________________________________ > OpenXPKI-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/openxpki-users > -- Protect your environment - close windows and adopt a penguin!
smime.p7s
Description: S/MIME Cryptographic Signature
_______________________________________________ OpenXPKI-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openxpki-users
