Hi Eric,
I dont know what codebase certmonger uses for the SCEP part but we
recently found some bugs that prevent the new SCEP layer from working
properly with e.g. JSCEP based code.
Those issues have been fixed in the development branch already and will
become part of the next release which is scheduled for end of august. It
would be great if you can have a look on the OpenXPKI log files what
happens inside the server so we can check if this is related to the same
issues.
If you can run your tests to a public available endpoint, please send me
a PM so we can arrange a test endpoint with the new code.
best regards
Oliver
Am 04.08.22 um 13:17 schrieb cwam--- via OpenXPKI-users:
Hi list,
I was successfully testing OpenXPKI 3.14.4 (docker image) scep server
and certmonger 0.79.13 for certificate enroll and renewal.
I am now using OpenXPKI 3.20.0 (docker image) scep server and certmonger
0.79.13 for a POC in our environment. Certmonger does not obtain
certificates anymore from scep server whereas certificates are properly
generated.
I tested the scep server with sscep client and all is OK. I get the
certificates.
I read this unexpected "Full reply" in certmonger debug logs :
2022-08-04 11:34:53 [3056] Certificate submission attempt complete.
2022-08-04 11:34:53 [3056] Child status = 3.
2022-08-04 11:34:53 [3056] Child output:
"Server reply was of unexpected MIME type "text/plain; charset=utf8".
Full reply:
0�"v0�"r1�H��
��0�"0�#`�He0�: *�H��
2022-08-04 11:34:53 [3056] Certificate not (yet?) issued.
2022-08-04 11:34:53 [3056] Request1('20220804090334') moved to state
'CA_UNREACHABLE'
This is probably related to certmonger operation but I'd like to get
your opinion about the possible causes.
Let me know if you need more informations.
Thanks, regards.
Eric.
_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users
--
Protect your environment - close windows and adopt a penguin!
_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users
